FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.
0 votes
383 views 6 comments
by anonymous

hello,

I have problem to configuration my teletonika as openvpn client with extended LAN.

192.168.8.20 Lan device --- LAN switch --- 192.168.8.99 teletonika lan port (only one cable connected router on the stick) --- router --- Linux server 10.8.0.1

I managed to setup connection between teletonika and vpn server. From vpn server i can ping teletonica 10.8.0.4

from teletonica I can ping 10.8.0.1 and 192.168.8.20

from 192.168.8.20 I can ping teletocica 192.168.8.20

but from server I can not ping 192.168.8.20

my firmware is RUT30X_R_00.07.01.4

BR

p { line-height: 115%; margin-bottom: 0.25cm; background: transparent }

1 Answer

0 votes
by anonymous
Hi

Please share a graphical network topology diagram here for this.
by anonymous

Topology looks like :

by anonymous
Are you able to ping 192.168.8.20 from ovpn server (10.8.0.1)?
So, Teltonika router is getting LAN interface IP from your router at 192.168.8.1/24? IS 192.168.8.1 is acting as a default gateway for the Teltonika router?
Have you tried configuring static routes?

Please share the troubleshoot file from the Teltonika router with me via Private message. To download troubleshoot file, go to WebUI and navigate to System->Administration->Troubleshoot page and click on the download button.
by anonymous

no i am not able to ping 192.168.8.20 from vpn server that is whole case. 

So, Teltonika router is getting LAN interface IP from your router at 192.168.8.1/24? IS 192.168.8.1 is acting as a default gateway for the Teltonika router?

yes that is corect

screenshots of my configuration

https://ibb.co/Qrzn7JN
https://ibb.co/TP5ppnG
https://ibb.co/N9m5T6W
https://ibb.co/C6kL55d
https://ibb.co/6Rq014B

by anonymous

Firstly, please upgrade your router's firmware version to the latest RUT30X_R_00.07.02.5. To upgrade firmware, please go to WebUI and navigate to system->Firmware page.
https://wiki.teltonika-networks.com/view/RUT300_Firmware#Update_Settings

To download the firmware file, please visit the link below:
https://wiki.teltonika-networks.com/view/RUT300_Firmware_Downloads
 

  • Afterwards, make sure that the ping on the LAN device is allowed from WAN sources. Most of the time firewall on the LAN devices blocks the ping request.
  • Can you traceroute from the LAN device to 10.8.0.1 and share the results?
by anonymous

hi,

i do not think i its firmware problem. but ofcoure i will upgrade it.

trace route from 192.168.8.20 to 10.8.0.1

$ traceroute 10.8.0.1
traceroute to 10.8.0.1 (10.8.0.1), 30 hops max, 60 byte packets
 1  router.lan (192.168.8.1)  0.263 ms  0.224 ms  2.301 ms
 2  192.168.3.254 (192.168.3.254)  2.296 ms  2.286 ms  0.616 ms
 3  83.1.5.76 (83.1.5.76)  3.589 ms  3.574 ms  4.677 ms
 4  * * *
 5  * * *
 6  * * *

ping from teletonika to 10.8.0.1

root@Teltonika-RUT300:~# ping 10.8.0.1
PING 10.8.0.1 (10.8.0.1): 56 data bytes
64 bytes from 10.8.0.1: seq=0 ttl=64 time=30.370 ms
64 bytes from 10.8.0.1: seq=1 ttl=64 time=29.308 ms
64 bytes from 10.8.0.1: seq=2 ttl=64 time=30.310 ms
 

traceroute form teletonika(192.168.8.99) to 10.8.0.1

root@Teltonika-RUT300:~# traceroute 10.8.0.1
traceroute to 10.8.0.1 (10.8.0.1), 30 hops max, 38 byte packets
 1  *  *  *
 2  *  *  *
 3  *  *  *
 4  *  *  *
 5^C
trace route from vpn server(10.8.0.1) to teletonika

root@kvm91361597:/home/VPN# traceroute 10.8.0.4
traceroute to 10.8.0.4 (10.8.0.4), 30 hops max, 60 byte packets
 1  10.8.0.4 (10.8.0.4)  29.230 ms  35.270 ms  35.190 ms

oot@kvm91361597:/home/VPN# traceroute 192.168.8.20
traceroute to 192.168.8.20 (192.168.8.20), 30 hops max, 60 byte packets
 1  * * *
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * *^C

Afterwards, make sure that the ping on the LAN device is allowed from WAN sources. Most of the time firewall on the LAN devices blocks the ping request.

how can I do that ?

Edit:

i changed gateway in my 192.168.8.20 device to 192.168.8.99 and now ping from 192.168.8.20 to 10.8.0.1 is working

but not working in other wyay so propably firewall

i can't find DMZ option in my teletonka can you help me with that? this is eastiest opction to check if firewall is my problem

i alsow check routes on my serwer looks ok for me

192.168.8.0     10.8.0.4        255.255.255.0   UG    0      0        0 tun0

by anonymous
You said you are using a PC at 192.168.8.20 for testing. You can try disabling the firewall for a moment and see if the ping works for you.