Openvpn site-to-site

samu92 · 2019-09-16T22:06:38.738Z

Hi everyone, I apologize for my English, I will immediately explain my problem.

I have an openvpn server on nas with gateway 192.168.1.1 and VPN address 192.168.2.x

-I have an MT300N-V2 configured as a VPN client with address 192.168.8.1

I can access the nas network from MT300N-V2 but not the other way around.
How can I solve it? how can I enter the path rules on MT300N-V2

garzie mille

robotluo · 2019-09-17T03:38:55.199Z

I have tested, OPENVPN does not seem to be able to do this, I do not know why, wireguard can

samu92 · 2019-09-17T22:11:48.641Z

practically openvpn does not accept connection??

robotluo · 2019-09-18T01:19:50.471Z

My result is the same as yours
I configured what I thought was the correct firewall and static routing, the same result

samu92 · 2019-09-18T05:25:31.046Z

I understand so I will use wireguard. is there any additional configuration?

robotluo · 2019-09-18T06:23:59.707Z

If you use wireguard, you can refer to our site2site feature

samu92 · 2019-09-18T22:05:00.128Z

following the guide I find the connection established. but I can’t communicate between the 2 networks. with the first mt300n-v2 I created the node connecting it with the Wan port to my home router with the second mt300n-v2 I used a data SIM and I connected to the LAN port but I can’t see the home network and not even that of my router with data SIM. what error do you make?

robotluo · 2019-09-19T03:50:13.189Z

Please add your home subnet on your first 300n-v2
eg:

%40CML%2400P(%7D%60NM%406L_%5BYK2U31295×721 38.6 KB

samu92 · 2019-09-19T05:50:03.200Z

thanks, now from the node I can access the main but not the other way around. should it be possible?

robotluo · 2019-09-19T06:28:56.851Z

If you want to reverse access, you need to add subnets to the corresponding node

samu92 · 2019-09-19T17:13:00.530Z

it works, thanks for the support. I have only one question, now to access I must be connected to the LAN port of the two devices. now how can I access my home network directly so as to keep the device attached to the router with only the Wan cable?

robotluo · 2019-09-20T01:49:18.269Z

Do you need direct access to your home network from the Internet?
Why don’t you just open a port on your home router?
You can also turn on the 300N-V2’s remote access and access your home network through the router.

%5BJADJQMYFKN13G6L%7DN5KU5D1116×513 22.5 KB

samu92 · 2019-09-20T05:20:33.288Z

no, I would like to use my MT300N-VN as if it were a PC connected to my home network and then with only one cable on the Wan port. it’s possible? so that from my home network I can access the remote network

robotluo · 2019-09-20T07:33:04.349Z

To build a site2site network, at least one node must have a public IP. If not, you need to set up port forwarding on your main router

samu92 · 2019-09-20T07:47:05.003Z

right, my device is connected to my adsl router via Wan but if I try to access the network of my second device via VPN from the PC connected to my adsl router it does not work.

robotluo · 2019-09-20T08:03:08.840Z

You’d better draw a simple topology

samu92 · 2019-09-20T08:36:52.011Z

Presentazione%20standard11280×720 38.3 KB

robotluo · 2019-09-20T09:59:35.334Z

samu92:

right, my device is connected to my adsl router via Wan but if I try to access the network of my second device via VPN from the PC connected to my adsl router it does not work.

Where is the “second device”?

samu92 · 2019-09-20T10:02:07.617Z

the second device is the VPN client with GL-Inet

robotluo · 2019-09-20T10:39:45.580Z

You need to configure the adls router and add a static routing table
Assuming your adls LAN interface is br-lan, you may need to add routing rules like the following

ip route add 192.168.10.0/24 dev br-lan

YK(03HTU4%7B44G12H%25LJ_Z8D896×500 39.5 KB