Cannot send traffic out VPN on MIFI, f/w 3.009

raman117 · 2019-01-08T02:56:56.506Z

I’ve got a really frustrating problem that I think has a simple solution. I’ve got the OpenVPN client setup on my MIFI, and it connects perfectly. HOWEVER, I cannot pass traffic through the vpn! Are there any specific firewall rules required to make this work? I do not care if ALL traffic goes through the VPN, or just traffic destined for that subnet, I just need it work.

alzhao · 2019-01-08T03:24:51.790Z

As long as you vpn is connected you should be able to route your traffic.

Here is two method to check.

First ssh to your router and check if the router itself can use the vpn to communicate. It is connected does not mean the vpn server can really accept traffic.

Second, when you upgrade, did you reserve settings? This could cause problems. If kept settings please do a revert firmware in more settings and try to upload oven again.

raman117 · 2019-01-08T03:38:37.214Z

Hello, thanks for your quick reply. I can login to the MIFI via the VPN perfectly (VPN Server to VPN Client on MIFI). I setup the parameters after I upgraded, so nothing needed to be saved. Do I need to bridge any interfaces, or setup zones for proper functionality?

alzhao · 2019-01-08T03:40:18.877Z

No you should not touch any settings manually.

Can you post your ovpn? You can remove your IP and credentials.

raman117 · 2019-01-08T03:41:04.032Z

Are you looking for just the conf, or the CA.crt, cpe.crt, and cpe.key?

alzhao · 2019-01-08T03:42:38.727Z

just the config should be OK.

You can also post the following log

ifconfig
route

raman117 · 2019-01-08T03:45:31.549Z

Here’s my config:

client
dev tun
proto udp
remote xxx.xxxxxx.xxx 9002
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert cpe.crt
key cpe.key
cipher AES-256-CBC
verb 3
;mute 20
pull

alzhao · 2019-01-08T03:50:27.163Z

alzhao:

ifconfig route

Cannot see any problem. Can you give the following as well?

ifconfig
route

raman117 · 2019-01-08T04:03:22.129Z

I will have to get that information tomorrow. I saw some blogs that said you need to setup the firewall zones and put some firewall rules in place so that traffic goes out the VPN automatically, you’re saying that is not necessary?

raman117 · 2019-01-08T04:11:34.976Z

I do have a copy of the system log:

ss1366×768 77.5 KB

Does that help?

alzhao · 2019-01-08T04:58:31.557Z

This not not necessary. Some people want to only router some IP or website so that is necessary.

raman117 · 2019-01-08T05:00:09.025Z

So you’re saying that if I want to route ALL traffic over the VPN, then I do not need to worry about firewall rules or zones?

alzhao · 2019-01-08T05:03:53.161Z

Yes of course. That is what the router does.

raman117 · 2019-01-08T05:04:36.951Z

Hm, ok. Then I wonder why it is not working for me. Tomorrow when I’m back in the office I will get the information you requested.

glitch · 2019-01-08T08:42:37.333Z

Where is the “auth-user-pass /etc/openvpn/ovpn0/auth/usrpwd.txt” in your config file?

Or if it’s a free VPN, maybe that is the problem!

raman117 · 2019-01-08T13:47:29.335Z

I dont have one, its connected to my own VPN server.

alzhao · 2019-01-09T07:01:47.612Z

should it be a subnet problem?

Can you check all the subnet of your server and the router? What are the subnet?