[djanice]

I purchased a Linksys E3000 to try and use as a VPN gateway to my remote network. I am attempting to set it up as an Openvpn client.

I have:

Turned off wan Port.
Turned off spi firewall
Change mode from gateway to router.
Turned off both wifi radios.
Connected to Ethernet port 1
Assigned ip address to 192.168.1.2
Setup my cisco router static routes to use E3000 as gateway for remote site LAN network.
enabled Openvpn client
Setup proper encryption and pasted certificates and keys.
Successfully connected to server and have been assigned an ip address from the pool I configured in Openvpn as server.
Ran route command on E3000 and have been pushed all appropriate routes from Openvpn as server.
Ran ifconfig and noticed that ip address is assigned to tun1 interface properly.
However NO tx or rx packets go through tun1.
I cannot ping remote site. I cannot ping from remote site either. I get no replies.
I can telnet to E3000 and send ping to dynamic pool gateway and notice that tun1 has packets but still get no response.
I have tried tons of iptables commands but I can't figure it out. It seems like it should work!
I have tested my Openvpn as server from a windows machines and it works properly. I can go to another machine and route through the Openvpn client machine and connect to the remote site with no problems. For some reason I just haven't been able to do it with dd-wrt. I'm sure it has to do with my limited Linux knowledge and iptables experience or something. Do I have to use the router as my gateway device for this to work properly???

Any help would be appreciated.

Thanks

David

[Sash]

wiki

[djanice]

Fixed it.... Wiki was no help to me LOL. Too much info for my brain!!!

I'm using OpenVPN Access Server.

I configured my server.

I setup USB and copied my autologon config from the Access Server software "client.ovpn" on it.

I saved a startup script:

openvpn --config /mnt/client.ovpn

I saved some firewall "rules":

iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

Voila