TomatoUSB

Hello all,
I'm trying to setup private (family oriented :-)) VPN. All things seem work OK - server on TomatoUSB (last Toastman build for RT-N16) is running and I can connect remotely from notebook. Although connection seems OK - I've no access to internal devices (for example to the GUI of TomatoUSB). Is there necessary to setup firewall rules or port forwarding rules? General info (can be more specified if needed):

OpenVPN over TAP interface (but was tryied over TUN also with same result)
LAN IP range - 192.168.1.0/24
VPN IP range - 192.168.101.0/24
Router's GUI - 192.168.1.1

Thanks for any advice

MiŠu

With TAP, you do not have a VPN IP range but rather a Client Address Pool and it must be in the same subnet as the LAN as TAP is bridged. And it should not overlap with what DHCP gives locally to the LAN.

When connected via TAP, it is just as if you were hard wired into your LAN. You access the router with its LAN IP ie 192.168.1.1 in your case.

I've switched DHCP option off and I setup "Client address pool" to the range 192.168.1.150-199. So - when I connect to the server - server assign me IP address 192.168.1.150 but after trying to connect GUI of router - its IP address (192.168.1.1) is not accessible.
MiŠu

Change your router with OpenVPN server running from the default 192.168.1.1 to something else that isn't used anywhere else. I looked at the private IP address range and just picked one. Search Wikipedia for private network and its under ipv4 range.

For example, my home router's LAN is 10.13.37.1.

You can change that under Basic and Network. Also make sure your DHCP is using the same. For me that is 10.13.37.100 - 10.13.37.149

What is happening is even though you are connected with OpenVPN you are still also connected to the LAN where you are at which is probably using the same IP address for its router and LAN and causing issues.

I've got solution!
Finally there were two mistakes in my approach:

1) OpenVPN GUI has to be run with admin priviledges to enable change routing table
2) in client config file has to be setup directive "comp-lzo"

Thank for discussion :-)
Best Regards
MiŠu