I have a RB2011UiAS-2HnD with ROS 6.47.4. On it I had been using OpenVPN both from a Linux PC and an Android Phone, basically with some simple tutorial based settings.
Now I have a new ISP and it gives my fixed IP with PPPOE. Virtually everything seems OK, I can generate traffic out (and seen as my fixed IP), and I can generate inbound traffic as well, NAT to various servers and all works.
Except the OpenVPN. I cannot make it run. I deleted all ovpn related settings and tried all available tutorials to set it up again. Still no success. It logs in, gets an IP address, can ping the router from the client, but cannot access anything on a higher protocol (other than ping), including the router, local servers and the internet. I tried setting all sort of versions of routing tables, but either nothing was routed to the vpn or it generated a recursive routing error.
Rather than boring you with my corrupted configurations (tried tens of different combinations), could somebody give me some tips what should be special when I have another PPP connection active (PPPoE)?
Thanks,
Nothing special, just a different WAN interface. Can you share your current config?
/export hide-sensitive file=anynameyoulike
Remove serial and any other private info, post between code tags by using the </> button.
I think I found it, and partially solved it.
Back in the past I had my firewall rules set per src. address. In the new configuration it was done using Interface lists. So, I added the ovpn interface to the relevant interface lists and it should have worked. The problem is that when I disconect and reconnect then the interface is regenerated - although with the same name - still in the interface list - interface pairing it becomes “unknown”.
So, what I did, added some special firewall rules for the vpn address range.
Is there a way to make - somewhere in the profile? - a permanent interface for the ovpn connection, so every time when a client connects it goes to the same interface, what I can add to the relevant interface lists and then the firewall rules can work with the same interface lists what I use for the normal connected devices?