Open VPN

[sjn37]

I have a problem with OpenVPN. I followed the wizard and got everything setup. I exported the config and imported on my Android App. I can connect with my phone without a problem. However, I cannot access resoures on my home network.

While I am connected I have tried to ping my devices and this seems to work. However, when I try to open a web page, like my Synology admin page, it times out. I don't understand why ping works but not http. What else could I try? What do I do to debug this?

[chemlud]

What are the firewall rules on then openVPN tab?

[sjn37]

 In    IPv4+6 *   *   *   *   *   *   *   OpenVPN Remote access wizard      
 Out   IPv4+6 *   *   *   *   *   *   *   OpenVPN

First rule was added by the wizard.
Second rule I added after searching for help on this issue. Not sure if it is needed.

[chemlud]

No, the second rule can be deleted.

Start a package capture on the LAN interface to see, if the packages reach the subnet from your openVPN client.

[ednt]

Sounds more like a MTU problem.
Ping uses only small packets, so it works.

Normally you can increase the size of the ping data packet.
Increase the size until it doesn't work anymore (something arround 1400 bytes).

Then reduce the MTU in your OpenVPN configuration (Client)

[sjn37]

The MTU is a great suggestion, I will keep that in mind.

When I was going to do a capture it suddenly worked. I had it work one time before, but then it stopped working again so I thought it was just a fluke, like I had forgotten to turn off my Wifi and it wasn't really working.

I am going to try a few more time while away from the house. Thanks for the help.

[lshantz]

Please let us know if you find out what the problem was. I just brought up my openvpn again after I realized that Wireguard is not ready for primetime. I have it working with my laptop, but would love to set up my Android for viewing security systems on the go.

[sjn37]

It has been working pretty reliably lately. I think it started working after I updated to 20.7.

Every now and then it fails but I think it might be something on the phone side. I cannot verify this since it is the only openVPN client I have to test it with.