• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

DNS issue while connected to OpenVPN

Scheduled Pinned Locked Moved OpenVPN
43 Posts 5 Posters 7.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A
    albertmiclat @johnpoz
    last edited by Apr 14, 2020, 12:06 PM

    @johnpoz this working client

    e9372920-65db-4b51-b6ba-90b35ef77fd8-image.png

    a99dccef-cd7e-4044-a751-4b706a459c1d-image.png

    7e00f87e-4118-41e4-9e0d-c71424e2ac45-image.png

    f9b5cc66-c7d8-4c84-9e43-52bda335aec0-image.png

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by Apr 14, 2020, 12:12 PM

      hmmmm - maybe I just need to finish waking up, more coffee ;)

      But sorry nothing currently jumping out to me on what is the issue here.. Other than yeah, if you can not talk to your gateway at the end of the tunnel, its not going to be possible to talk to some dns server that is on the other end of the tunnel..

      The big ? is why? hmmmmm?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • J
        jimp Rebel Alliance Developer Netgate
        last edited by Apr 14, 2020, 12:14 PM

        Does the AD server allow DNS queries from that whole /22?

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        A 1 Reply Last reply Apr 14, 2020, 12:34 PM Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator
          last edited by Apr 14, 2020, 12:15 PM

          Lets say it doesn't - that could explain why he can not do a dns query to it, but seems he can not even ping the other end of the tunnel, while another client that works can..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • J
            jimp Rebel Alliance Developer Netgate
            last edited by Apr 14, 2020, 12:15 PM

            Yep. That's also probably one of the easier things to miss.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • A
              albertmiclat @jimp
              last edited by Apr 14, 2020, 12:34 PM

              @jimp my office users network is 10.25.0.0/16 no issue on DNS queries..

              1 Reply Last reply Reply Quote 0
              • J
                jimp Rebel Alliance Developer Netgate
                last edited by Apr 14, 2020, 1:09 PM

                So the network on the LAN is actually the whole /16 directly on the interface? Or are you talking about in general?

                If it's really a /16 assigned to the interface then maybe you forgot something like a proxy ARP VIP block for the other part of that /22. But I really hope you don't have a /16 on an interface like that and you're just talking about the network layout in general...

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                A 1 Reply Last reply Apr 14, 2020, 1:13 PM Reply Quote 0
                • A
                  albertmiclat @jimp
                  last edited by Apr 14, 2020, 1:13 PM

                  @jimp yes im pertaining in general, office LAN users DHCP pool.

                  1 Reply Last reply Reply Quote 0
                  • A
                    albertmiclat
                    last edited by Apr 15, 2020, 8:57 AM

                    @jimp @johnpoz @Gertjan

                    just to update you guys on this issue, since we still unable to really pin point what causes the issue.

                    last night i did some changes on the OpenVPN configuration to best fit my requirements and to mitigate the situation.

                    (1) i changed the topology from net30 to subnet.

                    (2) i did shringked down my subnet from /22 to /24 this will cater the clients on the single subnet, /24 is sufficient enough for my current OpenVPN clients.

                    As of this writing everything works pretty well no more DNS related issue reported from my helpdesk.

                    Again, thanks guys for your individual inputs I greatly appreciate it.

                    G 1 Reply Last reply Apr 15, 2020, 11:13 AM Reply Quote 0
                    • G
                      Gertjan @albertmiclat
                      last edited by Apr 15, 2020, 11:13 AM

                      @albertmiclat said in DNS issue while connected to OpenVPN:

                      (1) i changed the topology from net30 to subnet.

                      That's an Oops.
                      "net30" needs 4+4 IP's per client. Older (before 2.0.x ?) need this setting. The DHCP pool will take a hit.
                      A /24 can handle a mere 30 VPN clients when using "net30".

                      The subnet setting, although not default, is the best choice.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      A 1 Reply Last reply Apr 15, 2020, 1:28 PM Reply Quote 0
                      • A
                        albertmiclat @Gertjan
                        last edited by Apr 15, 2020, 1:28 PM

                        @Gertjan yup thats true.. thats why i switch straight away..

                        1 Reply Last reply Reply Quote 0
                        43 out of 43
                        • First post
                          43/43
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received