[jx3]

I have successfully set up a VPN between two WRT54GL according to this guide.


-> My problem is that the Server LAN can not ping/connect to anything on the Client LAN, except the Client WRT54GL itself. (The Client WRT54GL can ping any random node on the Server LAN)


The Server side WRT54GL is connected to Internet, while the Client side WRT54GL is behind a router/NAT/DHCP-server (Thomson TG784 with a very limited firmware). The Client is set to "Operating Mode = Router"

I believe that my problem is related to the fact that the Client is behind the TG784. But I am not able to figure out any successful routing...

I have looked through the following post but I have not been able to an analogous implementation.
http://www.dd-wrt.com/phpBB2/viewtopic.php?p=509220
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=78690
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=78650
http://www.dd-wrt.ca/phpBB2/viewtopic.php?p=72186


I would appreciate any hints/solutions, that can help me fault tracing my setup. Thank you!
/Johan



------------------- Technical info -----------------

| Server 192.168.2.1 (VPN tun0 10.0.0.1) |----<INTERNET>----|TG784 192.168.1.254 |---| Client 192.168.1.2 (VPN tun0 10.0.0.2) |


Firmware: DD-WRT v24-sp2 (08/07/10) vpn - build 14896


Server routing

root@dd-server:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
212.x.y.1 * 255.255.255.255 UH 0 0 0 vlan1
212.x.y.0 * 255.255.255.128 U 0 0 0 vlan1
10.0.0.0 * 255.255.255.0 U 0 0 0 tun0
192.168.2.0 * 255.255.255.0 U 0 0 0 br0
192.168.1.0 10.0.0.2 255.255.255.0 UG 0 0 0 tun0
169.254.0.0 * 255.255.0.0 U 0 0 0 br0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default gw4-no64.x.y 0.0.0.0 UG 0 0 0 vlan1


Client routing

root@dd-client:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.0.0 * 255.255.255.0 U 0 0 0 tun0
192.168.2.0 10.0.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.1.0 * 255.255.255.0 U 0 0 0 br0
169.254.0.0 * 255.255.0.0 U 0 0 0 br0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default dsldevice.lan 0.0.0.0 UG 0 0 0 br0

[Sash]

are the client firewall rules correct? i dont think so.