GL-X3000 iPhone tethering up but no Internet connection

Routers
21

just discovered that:

  • gl-x3000 openvpn client works with an internet openvpn server;
  • from my openvpn VPN on pc I can connect via internet to the GL-X3000 console.

Than tethering is working, but for same reason data does not route back to my pc.

vpn-OK
vpn-OK1445×474 46.2 KB

22

Try thetrhring between Internet and router without phone.

23

what do you mean ? I need the phone for tethering :thinking:

24

You drawing your graph. So my understand you hotspot from your phone via 4G/5G?
Overall you have 2 wan (two cloud Internet)

25

Even after vpn is connected, dns still not working on your computer when connected to X3000?

Can you try set up encrypted dns on X3000 without vpn?

26

Yes, 2 wan, but the FritzBox wan is isolated from the GL-X3000 wan.
The OpenVpn server is on the FritxBox wan.
I also use the FritzBox wifi for internet access.

27

DNS is working because when I ping any site the address is resolved by DNS.

NOTE:

  • the wifi from pc to the Fritzbox wan is NOT up while testing tethering;
  • the OpenVpn connection is up in tethering mode;
  • from pc I can connet via tethering and OpenVpn to the gl-x3000 admin console 10.8.0.6:81 using port forwarding to 192.168.8.1:80
  • the problem is that data, other then OpenVpn, is not ruoted back to my pc :thinking:

diagram
diagram736×369 44.9 KB

28

From your phone could be problem GGnat. Even your phone try use open vpn app if that work with.

Another option you could try tailscale if you want remote control one lan group with different network

29

please see my previous post:

  • tethering on my phone is OK;
  • I am not using VPN on phone;
  • I do not see any reason why CGNAT should be a problem.

I think the problem is only routing from internet to my pc :thinking:

30

What “other” then OVPN should be routed back to your PC and why?

31

my pc receives only vpn traffic!!!
if I ping any address the name in resolved by DNS, but I get no response:

Pinging google.com [216.58.205.46] with 32 bytes of data:
Request timed out.

I believe it is a routing problem, because OpenVpn traffic is OK :thinking:

32

Since you are using OVPN: Could you please attach the config for your PC here?
(Make sure to remove keys before, if needed)

33

do you mean the VPNConfig.ovpn file ?

34

Yep, this file is the one we want to inspect.

35

I did remove all comments:

dev tun
tls-client
remote nasxxx.synology.me 1194
redirect-gateway def1
pull
proto udp
script-security 2
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----
</ca>
36

Is your goal to connect to the Fritz!Box VPN to be able to talk to devices in this network, or do you want to route all your traffic through the Fritz!Box?

37

my goal is to use my phone for internet connection!!!
but it only works for OpenVpn data :cry:

38

So if you disable OVPN on your X3000 there is no internet at all?

39

yes !!!

40

So my idea would be to get rid of OVPN before we do any further troubleshooting.
Maybe by resetting the X3000 to default settings.

Then connect to your X3000 by LAN or Wi-Fi and try to reach the internet using ping and nslookup google.com 9.9.9.9

The whole OVPN thingy confuses me. You didn’t enable Block all Non-VPN traffic by chance, do you?
image