|
Author |
Message |
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 0:12 Post subject: OpenVPN and PBR issue |
|
Hi Guys,
I am trying to get OpenVPN PBR to work with a streaming device but it won't work.
If I add the device IP address to PBR it doesn't work
If I remove the IP address from PBR it works fine on VPN.
If I add a linux computer IP address to PBR the linux computer works and goes over the VPN.
I am on build v3.0-r39538 std (04/16/19)
Any ideas as to why the device won't work on PBR? |
|
Back to top |
|
|
Sponsor
|
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 0:51 Post subject: |
|
I also tried EGC's script and it didn't help it just has the same outcome. |
|
Back to top |
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6865 Location: Romerike, Norway
|
Posted: Wed May 01, 2019 8:51 Post subject: |
|
What kind of streaming? Is it using Multicast? |
|
Back to top |
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 10:36 Post subject: |
|
Per Yngve Berg wrote: | What kind of streaming? Is it using Multicast? |
I believe it is, it is IPTV but from my ISP. |
|
Back to top |
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6865 Location: Romerike, Norway
|
Posted: Wed May 01, 2019 10:59 Post subject: |
|
If the source is your ISP, it should not use the VPN.
Multicast is not routed like normal unicast.
Have you un-ticked the Filter Multicast on the Security Page?
igmpproxy must also be configured to configured to forward Multicast. See /tmp/igmpproxy.conf |
|
Back to top |
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 11:23 Post subject: |
|
Per Yngve Berg wrote: | If the source is your ISP, it should not use the VPN. |
Sorry I did a typo the IPTV is not from my ISP.
The IPTV works fine over the VPN but the minute I try to use PBR it won't work.
I only want a couple of devices on my network to use the VPN. |
|
Back to top |
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6865 Location: Romerike, Norway
|
Posted: Wed May 01, 2019 11:47 Post subject: |
|
Use tcpdump to see what traffic passes through the router. Multicast uses addresses in the 239.x.x.x range.
igmpproxy can only have one upstream interface.
Where are the VPN tunnel terminating? |
|
Back to top |
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 12:20 Post subject: |
|
Per Yngve Berg wrote: | Use tcpdump to see what traffic passes through the router. Multicast uses addresses in the 239.x.x.x range. |
Do I just put tcpdump in to the command box?
Per Yngve Berg wrote: | igmpproxy can only have one upstream interface. |
I am not sure what you mean by this, sorry.
Per Yngve Berg wrote: | Where are the VPN tunnel terminating? |
Do you mean the VPN IP address, if so then it is in the UK - 109.123.122.214 |
|
Back to top |
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6865 Location: Romerike, Norway
|
Posted: Wed May 01, 2019 12:32 Post subject: |
|
jbrines wrote: | Do I just put tcpdump in to the command box? |
It will not work. SSH/Telnet into the router.
jbrines wrote: | Do you mean the VPN IP address, if so then it is in the UK - 109.123.122.214 |
Is it a VPN server in your home or a commercial VPN service? |
|
Back to top |
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 12:53 Post subject: |
|
Per Yngve Berg wrote: | jbrines wrote: | Do I just put tcpdump in to the command box? |
It will not work. SSH/Telnet into the router.
jbrines wrote: | Do you mean the VPN IP address, if so then it is in the UK - 109.123.122.214 |
Is it a VPN server in your home or a commercial VPN service? |
Tried tcpdump via telnet and get, do I need to install it? -sh: tcpdump: not found
The VPN is commercial - SlickVPN. |
|
Back to top |
|
|
egc DD-WRT Guru
Joined: 18 Mar 2014 Posts: 12877 Location: Netherlands
|
|
Back to top |
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 14:33 Post subject: |
|
egc wrote: | My script always works
Have you disabled Shortcut forwarding Engine on the Setup page? |
Yeah SFE is disabled bud.
I like your script it will do everything I want but just doesn't work with my IPTV device. |
|
Back to top |
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6865 Location: Romerike, Norway
|
Posted: Wed May 01, 2019 17:00 Post subject: |
|
jbrines wrote: | Tried tcpdump via telnet and get, do I need to install it? -sh: tcpdump: not found |
You probably have one of those cheap routers with small flash size that have no room for tcpdump. |
|
Back to top |
|
|
jbrines DD-WRT Novice
Joined: 21 Mar 2019 Posts: 39
|
Posted: Wed May 01, 2019 17:57 Post subject: |
|
Per Yngve Berg wrote: | jbrines wrote: | Tried tcpdump via telnet and get, do I need to install it? -sh: tcpdump: not found |
You probably have one of those cheap routers with small flash size that have no room for tcpdump. |
I have a Buffalo WZR-1750DHP with 128mb flash |
|
Back to top |
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6865 Location: Romerike, Norway
|
|
Back to top |
|
|
|