OpenVPN connects, stays connected, but can't access network resources - Page 2

sky-knight · 06-30-2009, 12:25 PM

yes but what OS? XP? Vista? What?

If the client is Vista you have no choice but to get the RC client from openvpn.net, and follow the install instructions outlined on these forums. Otherwise your client won't get the proper routes to move any traffic around.

polaris20 · 06-30-2009, 01:13 PM

I gotta say, it absolutely frosts me to no end that Verizon refuses to give/sell me a DSL modem; not modem/router/firewall, just plain old modem like i used to have with cable. This is such an absolute pain in the behind for this type of stuff.

Tech support just talks to ya like you're a moron too: "why the heck wouldn't you want a router/firewall too?"

"Because I've got my own that's vastly superior, stupid"

polaris20 · 06-30-2009, 01:20 PM

Quote:

Originally Posted by sky-knight

yes but what OS? XP? Vista? What?

If the client is Vista you have no choice but to get the RC client from openvpn.net, and follow the install instructions outlined on these forums. Otherwise your client won't get the proper routes to move any traffic around.

Sorry, XP.

And unfortunately there's no routing options in the Verizon box; I'm not sure what to do at this point. That's got to be what the problem is.

Keep in mind I've gotten OpenVPN to work very easily when using plain old broadband modems, so it's not my first experience with O-VPN.

It's just the first time I've attempted it with this particular stupid combo unit.

sky-knight · 06-30-2009, 03:27 PM

Well, if the router won't let you do a static route the only choice you have is to insert a static route on each and every piece of equipment you want to use over the vpn.

For windows the command is:

route add -p 172.16.16.0 255.255.255.0 192.168.0.1

172.16.16.0 and 255.255.255.0 are the range and mask you use for the OpenVPN address pool. 192.168.0.1 is the Untangle's IP address. And the -p makes the route entry persistent across reboots. You may want to leave that part out until you're sure the route works.

And if you ever do a site-to-site you'll have to add another route for the far side of the permanent tunnel.

06-30-2009, 12:25 PM	#11 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 14,698	yes but what OS? XP? Vista? What? If the client is Vista you have no choice but to get the RC client from openvpn.net, and follow the install instructions outlined on these forums. Otherwise your client won't get the proper routes to move any traffic around. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

06-30-2009, 03:27 PM	#14 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 14,698	Well, if the router won't let you do a static route the only choice you have is to insert a static route on each and every piece of equipment you want to use over the vpn. For windows the command is: route add -p 172.16.16.0 255.255.255.0 192.168.0.1 172.16.16.0 and 255.255.255.0 are the range and mask you use for the OpenVPN address pool. 192.168.0.1 is the Untangle's IP address. And the -p makes the route entry persistent across reboots. You may want to leave that part out until you're sure the route works. And if you ever do a site-to-site you'll have to add another route for the far side of the permanent tunnel. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

06-30-2009, 01:13 PM	#12 (permalink)
polaris20 Newbie Join Date: Apr 2009 Posts: 10	I gotta say, it absolutely frosts me to no end that Verizon refuses to give/sell me a DSL modem; not modem/router/firewall, just plain old modem like i used to have with cable. This is such an absolute pain in the behind for this type of stuff. Tech support just talks to ya like you're a moron too: "why the heck wouldn't you want a router/firewall too?" "Because I've got my own that's vastly superior, stupid"