GL-AR750S VPN into LAN setup

quest · 2020-01-29T01:06:40.319Z

I have OpenVPN into my LAN from my cell phones data network. I want this phone to only access one single IP address and do not want the VPN subnet to access all of my LAN subnet. What route do I need to specify to do this? (I tried a few and they didn’t work)

LAN IP on the GL-AR750S slate router: 10.2.2.1
VPN Server TUN0 IP: 10.8.0.1
My Phone’s internal IP when I VPN into my router: 10.8.0.2

IP on my local LAN that I want to access from my phone when I connect to VPN: 10.2.2.2

Thanks

alzhao · 2020-01-30T03:45:35.470Z

Not sure about your set up. In the default setup, should your phone get an IP 10.2.2.x?

Why it get IP directly from your vpn server?

quest · 2020-01-30T17:24:49.432Z

I installed OpenVpn app on my phone and uploaded the default config that I got from the router VPN server page. OpenVPN on my phone connected from the internet to my router and gave it that VPN IP as the internal IP and my Internet provider IP on the WAN of the router for my external IP. I can acess the internet from my phone after that but not my LAN, unless I click “Allow Local Access” in the Router VPN settings, which gave a warning that every node on my network could view all files. So, I thought to make it more secure maybe I could route my phone to just one computer that I wanted it to access and not allow local access to whatever I was allowing it to. I guess all VPN ips? or maybe all LAN and VPN ips.

alzhao · 2020-01-31T10:58:06.187Z

Just to confirm once more: AR750s is the openvpn server, not client, right?