LAN to LAN - Problems ;)

phil.davis

Now I see the OpenVPN server is behind the DD-WRT. I guess DD-WRT must be port-forwarding 1194 through to the OpenVPN server.
You are going to have some issues with your clients at the DD-WRT end when they try to reply - they will have DD-WRT as their ordinary gateway. DD-WRT will need to route back to the OpenVPN server for traffic to 192.168.2.0/24…

But for now, what is the OpenVPN server running on?
I guess your original error messages mean that it is rejecting the packets coming in across the OpenVPN link from 192.168.2.188. That needs to be fixed somehow.

da_blubb

The Port-Forwarding is already done.

The OpenVPN-Serve is running on a Ubuntu-Server 12.04.

Any ideas how to set up a specific gateway for the 192.168.0.2/24-Net?

johnpoz

Why don't you just move the openvpn connection to dd-wrt or put pfsense where dd-wrt is?

Your over complicating the setup, putting your vpn endpoint behind a nat and not as the default gateway for the network your tying to access is not an ideal way to go about it.

Why are trying to use pfsense behind dd-wrt? I personally would just use pfsense and remove dd-wrt completely.. But if you want to use it - its supports openvpn as well. http://www.dd-wrt.com/wiki/index.php/OpenVPN

da_blubb

Well the DD-WRT router is just a consumer-router with horrible throughput(600-800kb/s openvpn-performance) and i need at least 2mb/s.
I currently dont got the hardware to build a new pfsense-box.

UPDATE:
The speed was when using openvpn on the dd-wrt-router

johnpoz

So you need 2mbps, and dd-wrt does 800kbps – how is putting openvpn on a box behind dd-wrt going to fix that?

So replace the hardware running dd-wrt on now that something can handle the bandwidth you need and then run openvpn on that. Depending on the hardware - just run pfsense vs dd-wrt.

da_blubb

The box behind the DD-WRT router is a ubuntu-server.
The ubuntu-server got a 4-core-xeon cpu. I think this should handle the 2 mb/s

doktornotor

Does not exactly matter what's behind the bottleneck. :D

da_blubb

The dd-wrt-router is only the bottleneck when im running the openvpn-service on it.
So whats your point? Or am i missing something?

I dont want to replace the router, because i dont got the hardware
and i dont want to spend the money just for running openvpn on it.

doktornotor

I still do not get why are you running OpenVPN thru an obvious bottleneck. Make an AP from it on your LAN, stop using it as router.

da_blubb

I dont get why the dd-wrt router is the bottleneck?

doktornotor

Sigh… because you said it yourself? As suggested by myself and other people above, move pfS where the DD-WRT is right now and use the DD-WRT router as an AP. Otherwise, since this obviously does not go anywhere - have a nice day.

kejianshi

CaptainWTF could walk him through this… He figured this out and its fresh in his mind (-:

da_blubb

Ok my fault. I was talking about 800kb/s throughput when running openvpn on the dd-wrt router.
I tought this was clear due to the advice in the previous post.
Thats why i want to use the ubuntu-server.