Modify

Opened 7 years ago

Closed 6 years ago

#1224 closed request (non-fon)

Problem with my OpenVPN Services...

Reported by: jrr_master@… Owned by:
Priority: normal Milestone:
Component: fon-plugin-openvpn Version: 2.3.7.0 beta3
Severity: unknown
Cc: Hardware: 2.0n (FON2300)

Description

Hello, I have problem to grant access on my Fonera Router with my OpenVPN (from ChangeIP.com) account. I want to access my Dashboard (at my home) in any locations that internet connections exist with this VPN! So I have followed OpenVPN configuration at this link step by step: https://fon.zendesk.com/entries/21925706-openvpn-configuration-and-safe-surf-feature

You can view my configurations in image 1, 2, 3, and 4 on my attachment.

Finally, I tried to connect with OpenVPN Software on last step... But, I cannot connect to my Fonera dashboard (please look at my image 5). What should I do???

Last question, why "Public IP/Hostname" form on Dashboard>>Settings>>OpenVPN doesn't exist like before on my 2.3.7.0 Beta Firmware (Before I upgraded to 2.3.7.0 Beta++ Firmware because of bug that I asked at this link: http://trac.fonosfera.org/fon-ng/ticket/1222). Is this "Public IP/Hostname" form important things to access my VPN settings above???

Thanks for answering my curious questions. I really appreciate it.

Attachments (6)

1. My Dynamic DNS Settings.png (140.0 KB) - added by jrr_master@… 7 years ago.
2. My OpenVPN Settings.png (134.2 KB) - added by jrr_master@… 7 years ago.
3. My Firewall Application Settings.png (136.8 KB) - added by jrr_master@… 7 years ago.
4. My ChangeIP.com Domain Names.png (127.3 KB) - added by jrr_master@… 7 years ago.
5. OPENVPN Connection.png (64.5 KB) - added by jrr_master@… 7 years ago.
IPConfig All.txt (6.6 KB) - added by jrr_master@… 7 years ago.

Download all attachments as: .zip

Change History (24)

Changed 7 years ago by jrr_master@…

Changed 7 years ago by jrr_master@…

Changed 7 years ago by jrr_master@…

Changed 7 years ago by jrr_master@…

Changed 7 years ago by jrr_master@…

comment:1 Changed 7 years ago by matthijs

  • Status changed from new to infoneeded

I suspect that you need to configure port forwarding in your ISP's modem/router for OpenVPN to work. You'll need to lookup the the ip address of your Fonera on the Fonera dashboard (under "Internet Connection", it's likely something like 192.168.1.x or 10.0.0.x). Then open up the configuration page for your other modem/router, and set up port forwarding for port 1194, protocol UDP to the Fonera's IP address.

About the Public IP/Hostname field, that's only useful when you don't want to configure DDNS and want to use the IP address or another hostname that you configured manually.

comment:2 Changed 7 years ago by jrr_master@…

That setting above works for any connection type? I'm using wifi connection to connect my fonera with the Internet connection...

comment:3 follow-up: Changed 7 years ago by matthijs

Yes, that should work with wifi too (but you need to make the config changes on the router/AP/modem that your Fonera is connecting _to_, not on the Fonera itself!).

I just realized: You might additionally need to configure that router to give your Fonera a static IP (or configure your Fonera to use a static IP), to prevent the Internet COnnection IP of your Fonera from changing over time...

comment:4 Changed 7 years ago by jrr_master@…

About that port (1194), I fill it out on Source Port or Target Port?

comment:5 Changed 7 years ago by matthijs

Both (though just filling source port will probably make target port default to the same value): When a connection is made on the internet side of your router on the source port, it will be forwarded to the Fonera on the target port. Both of these ports should be port 1194.

comment:6 in reply to: ↑ 3 Changed 7 years ago by anonymous

Replying to matthijs:

Yes, that should work with wifi too (but you need to make the config changes on the router/AP/modem that your Fonera is connecting _to_, not on the Fonera itself!). what config changes on my Router Modem (I'm using dial up modem to connect internet and tethering it as a hotspot)?

comment:7 follow-up: Changed 7 years ago by matthijs

The port forwarding changes I talked about should be made on your Router/modem/whatever is between your Fonera and the internet.

It seems you're not using a regular router for this, but a dial-up modem and some kind of hotspot software? Is this running on a normal PC, or is this specialized router? In either case, it is likely that the hotspot / modem is doing NAT (Network Address Translation) which "hides" the Fonera from the internet, meaning you need to configure port forwarding to make your Fonera reachable. Since this procedure is different for different modems/routers/etc., I can't really provide details about how to set this up...

comment:8 in reply to: ↑ 7 Changed 7 years ago by anonymous

Replying to matthijs: yes I'm using dial-up modem running on normal PC, but not kind of (third party) hotspot software, I only use wlan hosted network on command prompt. How can I know if this modem is doing NAT?

comment:9 Changed 7 years ago by matthijs

I suspect the modem is not doing NAT, but your PC is.

A good way to tell would be to know what IP address ranges you are using. Perhaps you could paste the output if "ipconfig /all" run on your PC? I can probably tell you if you're doing NAT, then. If so, you'll have to figure out how to setup port forwarding on that PC yourself, though, since I really don't know how that works on a Windows PC...

Changed 7 years ago by jrr_master@…

comment:10 Changed 7 years ago by jrr_master@…

I have been attached my ipconfig... what should I do next?

comment:11 Changed 7 years ago by matthijs

Hmm, this looks like the ipconfig of a PC connected to your Fonera? I meant to get the ipconfig output of the PC that has the dial-up connection and hotspot setup, seems I wasn't clear enough. Or, if this really is the ipconfig output from that PC, then I'm not understanding your network setup well enough...

comment:12 Changed 7 years ago by jrr_master@…

So, any other solutions? What should I do in this situation?

comment:13 Changed 7 years ago by matthijs

Attaching the ipconfig /all output from the right PC?

comment:14 Changed 7 years ago by jrr_master@…

Yes, I get the ipconfig output of the PC that has the dial-up connection and hotspot setup...

comment:15 follow-up: Changed 7 years ago by matthijs

Hmm, then I'm not sure if I understand your network setup or the ipconfig output correctly.

Looking at ipconfig, I see a "PPP adapter Wireless Terminal", which is probably your dial-up connection. However, it has no default-gateway set, which would mean it can't be used to connect to the internet. Perhaps the 0.0.0.0 default gateway is special for PPP and I am misreading this, though.

However, I also see "Wireless LAN adapter Wireless Network Connection" which looks like it is connected to your MyPlace? signal? I thought the Fonera was connected as a wireless client to the PC, not the other way around? Or perhaps this is just a connection that is made automatically? In any case, this could cause all internet traffic to go through the Fonera, resulting in a routing loop, but perhaps it autoselects the PPP connection as the default gateway for some reason so this is not a problem. In any case, I would make sure that this PC is not connected to the MyPlace? signal.

Finally, I see Wireless LAN adapter Wireless Network Connection 2, which I'm not sure what that is. This could be your "hotspot" connection, in which case I see that the network (192.168.137.0/255.255.255.0) is different from the PPP network (10.164.155.0/255.255.255.255). This most likely means this PC is doing NAT (to prevent your ISP from seeing the 192.168.137.x addresses).

So, this would mean you need to set up some kind of port forwarding on this dial-up PC. I'm not sure how this works, but a quick Google for "windows port foward" gives me this utility, perhaps it is useful for you: http://www.quantumg.net/portforward.php

In any case, you'll need to setup a port forward from port 1194 to the Fonera's internet IP (which is something like 192.168.137.x if my understanding is correct) on port 1194.

Hope this helps!

comment:16 in reply to: ↑ 15 ; follow-up: Changed 7 years ago by anonymous

Replying to matthijs: I'm sorry for late reply... this is due to my busy daily activities. :)

Looking at ipconfig, I see a "PPP adapter Wireless Terminal", which is probably your dial-up connection. However, it has no default-gateway set, which would mean it can't be used to connect to the internet. Perhaps the 0.0.0.0 default gateway is special for PPP and I am misreading this, though.

> Yes it's my dial-up connection... although it has no default-gateway set, I can use it to connect to the internet.

However, I also see "Wireless LAN adapter Wireless Network Connection" which looks like it is connected to your MyPlace? signal? I thought the Fonera was connected as a wireless client to the PC, not the other way around? Or perhaps this is just a connection that is made automatically? In any case, this could cause all internet traffic to go through the Fonera, resulting in a routing loop, but perhaps it autoselects the PPP connection as the default gateway for some reason so this is not a problem. In any case, I would make sure that this PC is not connected to the MyPlace? signal.

> No, this my main computer doesn't connect to MyPlace? signal. MyPlace? signal is connected to Wireless LAN adapter Wireless Network Connection 2 as a Virtual WiFi? Router. So this PC is not connected directly to MyPlace? signal (except for testing purpose only ;)). I test my VPN on other my Netbook-pc.

Finally, I see Wireless LAN adapter Wireless Network Connection 2, which I'm not sure what that is. This could be your "hotspot" connection, in which case I see that the network (192.168.137.0/255.255.255.0) is different from the PPP network (10.164.155.0/255.255.255.255). This most likely means this PC is doing NAT (to prevent your ISP from seeing the 192.168.137.x addresses).

> Yups, this is my hotspot source for fonera's internet connection.

So, this would mean you need to set up some kind of port forwarding on this dial-up PC. I'm not sure how this works, but a quick Google for "windows port foward" gives me this utility, perhaps it is useful for you: http://www.quantumg.net/portforward.php

> Please tell me how to use Port Forwarding For Windows... how do I set [port to listen on] [ip of host to connect to] [port to connect to] forms.

In any case, you'll need to setup a port forward from port 1194 to the Fonera's internet IP (which is something like 192.168.137.x if my understanding is correct) on port 1194.

> I have configured it before...

Hope this helps!

Thank you...

comment:17 in reply to: ↑ 16 Changed 7 years ago by matthijs

So, this would mean you need to set up some kind of port forwarding on this dial-up PC. I'm not sure how this works, but a quick Google for "windows port foward" gives me this utility, perhaps it is useful for you: http://www.quantumg.net/portforward.php

> Please tell me how to use Port Forwarding For Windows... how do I set [port to listen on] [ip of host to connect to] [port to connect to] forms.

Uh, I think I just did:

In any case, you'll need to setup a port forward from port 1194 to the Fonera's internet IP (which is something like 192.168.137.x if my understanding is correct) on port 1194.

These instructions were meant to configure the port forward on your Windows (dial-up) machine, not on the Fonera.

I hope this helps, because if it doesn't, I don't think I can offer you any other advice to make this work...

comment:18 Changed 6 years ago by matthijs

  • Resolution set to non-fon
  • Status changed from infoneeded to closed

I'm closing this ticket, as I think our support options are pretty much exhausted.

Add Comment

Modify Ticket

Action
as closed The ticket will remain with no owner.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.