New 2.1 install not permitting users to connect to Internet
-
Is OpenVPN set up to route all traffic from the remote location through the main location's Internet gateway?
Have you done a trace route from one of the LAN PCs to an internet location? What are the results?
Can you provide a diagram of the topology with internal IPs so I/we can see where the trace route is going?
-
We need to see your:
System General Setup
Firewall > rules (LAN, WAN and Openvpn tabs)
to start with…
The interfaces > LAN and WAN pages would also be helpful.
With that things would probably go quickly.
-
Yes, that would be my guess; all you traffic is being routed over the VPN and the other end isn't configured to route it out there. Th reason you can ping the ISP gateway is because it's seen as a local address, it's in the same subnet as one of your interfaces.
Steve
-
Here are the requested images
Thanks
cjb
-
general setup
![General Setup.png](/public/imported_attachments/1/General Setup.png)
![General Setup.png_thumb](/public/imported_attachments/1/General Setup.png_thumb) -
Lan Interface
![Lan Interface.png](/public/imported_attachments/1/Lan Interface.png)
![Lan Interface.png_thumb](/public/imported_attachments/1/Lan Interface.png_thumb) -
Lan Rules
![Lan Rules.png](/public/imported_attachments/1/Lan Rules.png)
![Lan Rules.png_thumb](/public/imported_attachments/1/Lan Rules.png_thumb) -
Wan Interface
![Wan Interface.png](/public/imported_attachments/1/Wan Interface.png)
![Wan Interface.png_thumb](/public/imported_attachments/1/Wan Interface.png_thumb) -
Wan Rules
![Wan Rules.png](/public/imported_attachments/1/Wan Rules.png)
![Wan Rules.png_thumb](/public/imported_attachments/1/Wan Rules.png_thumb) -
Open VPN Rule
![openVPN Rule.png](/public/imported_attachments/1/openVPN Rule.png)
![openVPN Rule.png_thumb](/public/imported_attachments/1/openVPN Rule.png_thumb) -
Like I said above you should not have a gateway set on the LAN interface. Remove it.
In some rare circumstances you might want a gateway on LAN but here it has probably become the default system gateway which kills routing.Steve