1

Hi all,

I need help to configure the custom-rules on the GL Inet.

During active openvpn connection I can’t connect to the NAS on the other local network of the fritzbox router, when I switch off openvpn all is working.

Of course all other communication shut run over openvpn!.

Picture of network structure
5e1c619fc2a10b3640a76fc232de6ba4|690x274

Nas has the IP adress 192.168.102.11

Please help to configured :grinning:

2

image
image905×698 30.4 KB

3

Hi,

thanks for the input and help but no success :roll_eyes:

I did this like recommended

setup
setup890×712 43.6 KB

but was not working, if I disable VPN ping is OK

Ping without OpenVPN
Ping without OpenVPN618×505 64 KB

With OpenVPN not working.

Ping with OpenVPN
Ping with OpenVPN616×547 71.8 KB

Please help further! also Netflix and so on. must be opened without VPN.

cu

4

Can nobody help??? Technical support please help!.

5

Hi,
Can you execute the following command on the GL router and tell me the result?

ip route show table 52
6

Attached the table !

Unbenannt
Unbenannt827×525 52 KB

7

Check whether the IP you set is in the bypass table of ipset first

ipset list gl_bypass_vpn_domain

And then you can check the routing path on the GL router using the following command

ip route get 192.168.102.11 from 192.168.8.111 iif br-lan mark 0x80000
8

Hi,

attached the picture.

1
11241×480 49.5 KB

9

No help !!!, please support

10

Any news, any help ???

12

I deleted previous post as I overread some information, which made my post senseless.

Nevertheless, as you have written that Netflix and other also should not use the VPN would it be an option to rather specify what should use VPN instead of what should not?

13

Hi,

that is maybe correct but the goal shut be first to get this work so…
So please somebody can help what to do!

14

I agreed. First it should work, therefore I would first try the other way around, because if that also is not working, it may be easier to rule out other options.

You could try adding this to your openVPN client config

route 192.168.102.0 255.255.255.0 net_gateway
15

I’m very sorry that I didn’t notice your message. If you want to call me, you can directly @me.
You can try adding the following firewall rules

iptables -I FORWARD  -d 192.168.102.0/24 -j ACCEPT