Brume 2 MT2500 OpenVPN behind existing router

[dover]

Current setup: Internet <-> ASUS Router with Open VPN <-> Clients on LAN (192.168.1.x)

We currently use OpenVPN in the ASUS router to allow remote clients to see LAN devices connected to the ASUS router (192.168.1.x)

I have a new Brume 2 MT2500A and would like to use this to replace the ASUS router. Before doing that, I want to test the OpenVPN server on the MT2500 to make sure clients can remotely connect and see the 192.168.1.x devices. If successful, I'll move clients to the new OpenVPN server in the MT2500 and then replace the ASUS with the MT2500.

I basically followed the info here:

GL.iNet router behind the main router as a VPN server

I used a GL.iNet Brume 2 VPN router using version 4.x of the GL.iNet firmware like this. Since the Brume 2 doesn't have wireless, I first connected to the Brume 2 LAN port to my Windows computer and connected to it's 192.168.8.1 admin page. I then setup the routers security page to enable all of the remote access control features so that I could access the Brume 2's admin page on it's WAN port. Then I connected the Brume 2 WAN port to my primary router's LAN network, and I setup a DHCP reservat…

What I did:

• ASUS: reserve IP 192.168.1.2 for the MT2500 WAN MAC address
• Connect MT2500 WAN to ASUS LAN (192.168.1.2 confirmed)
• ASUS: port forward the MT2500 OpenVpn Server port to 192.168.1.2 (port 1195 so it will not conflict with 1194 on the ASUS router)
• From another location, I confirmed that I could connect to the MT2500 OpenVpn server behind the ASUS router (DDNS in the MT2500 working through the ASUS router)

The issue is that my connected client cannot see the other devices connected to the ASUS router. I know that my temporary test configuration will not be my final solution, but I'd like to see this work before moving forward so I can test some scenarios.

My client IP once connected to the MT2500 OpenVPN server is 10.8.0.2 which is due to the ipv4 subnet configured for the MT2500 OpenVpn server. Is there a way to also allow this client to see the other 192.168.1.x devices that are connected to the ASUS router?

Another related question: Once I use the MT2500 as the main router, and the MT2500 LAN for the client devices, I do not want client internet connections to go through the VPN connection. In the ASUS OpenVPN Server there is a setting for this, but I don't see one in the MT2500.

Thanks in advance.

[bruce]

@dover

My client IP once connected to the MT2500 OpenVPN server is 10.8.0.2 which is due to the ipv4 subnet configured for the MT2500 OpenVpn server. Is there a way to also allow this client to see the other 192.168.1.x devices that are connected to the ASUS router?

Since the subnets of the ASUS and MT2500 are different, it's normal that the VPN client connected to the MT-2500 cannot see the ASUS's LAN clients, since the VPN clients of the MT2500 behind the MT2500 WAN and behind the ASUS LAN, but the VPN client connected to the MT2500 can access the ASUS's LAN clients.

If the MT2500 as the main route, you will see the clients list.

@dover

Once I use the MT2500 as the main router, and the MT2500 LAN for the client devices, I do not want client internet connections to go through the VPN connection. In the ASUS OpenVPN Server there is a setting for this, but I don't see one in the MT2500.

MT2500 LAN clients are unlikely to access the Internet through the VPN server, as the VPN server cannot become the default gateway in the routing table in router, LAN clients can only go through the WAN interface or VPN client interface if it enabled.

If I misunderstood this quoted feature, take a screenshot of the ASUS page for this function and let’s further to know.