topic Re: OpenVPN 1194 in Tech Help - Software/Hardware etc

OpenVPN 1194

Whisper21 — Wed, 18 Oct 2023 18:51:16 GMT

Hive,

I'm struggling with OpenVPN. All my port forwarding is done correctly, and DMZ and firewalls have been disabled.

When I try to ping the router the tracert shows that the packets are being blocked by a PN server.

Is there a solution to this problem, or is there a workaround, please?

thanks

Richard

Re: OpenVPN 1194

Dan_the_Van — Wed, 18 Oct 2023 18:53:36 GMT

@Whisper21 welcome to the forum.

Which Hub and VPN server are you using?

Does your Hub respond to pings?

Re: OpenVPN 1194

Whisper21 — Wed, 18 Oct 2023 18:58:51 GMT

PN Hub One

OpenVPN

No, the router is not responding to a plain ping, 100% loss.

Done a TraceRoute from a PC at work, got 9 hops and then stalled.

9	core1-hu0-2-0-2.colindale.ukcore.bt.net	195.99.127.65	gb	19.133 ms
	core1-hu0-2-0-2.southbank.ukcore.bt.net	195.99.127.69	gb	19.240 ms
	core1-hu0-15-0-4.southbank.ukcore.bt.net	109.159.252.141	gb	18.971 ms

Thanks for your help

Re: OpenVPN 1194

MisterW — Wed, 18 Oct 2023 19:15:16 GMT

I'm pretty sure the Hub one won't ( and can't be configured to ) respond to a ping from the WAN.

This thread https://community.plus.net/t5/Tech-Help-Software-Hardware-etc/Hub-One-WAN-Ping-ICMP/td-p/1304450 may help with possible workarounds

Re: OpenVPN 1194

dvorak — Wed, 18 Oct 2023 19:25:51 GMT

Moderators Note

This topic has been moved from Broadband to Tech Help

Re: OpenVPN 1194

Dan_the_Van — Wed, 18 Oct 2023 19:35:18 GMT

openVPN will work through a Hub One, I have used a raspberry pi 2 connecting with UDP protocol only and had no issues, but since moved to wireguard on a pi 3.

What does the port forward rule look like? Do have a static public IP Address or using something else?

Re: OpenVPN 1194

Whisper21 — Wed, 18 Oct 2023 20:05:03 GMT

Not always a static IP, but it hasn't changed for a few weeks.

Port forwarding set up on specific ports and set to my VPN servers' internal IP.

As per my post the packets seem to be getting stopped long before they get anywhere near my router.

Re: OpenVPN 1194

ghamilton123 — Wed, 18 Oct 2023 20:28:43 GMT

Would you be able to perform a port scan from a EXTERNAL network, and see if 1194 is open?

Re: OpenVPN 1194

dvorak — Wed, 18 Oct 2023 20:32:56 GMT

You can use https://www.yougetsignal.com/tools/open-ports/ to check whether your port is open or not.

Re: OpenVPN 1194

ghamilton123 — Wed, 18 Oct 2023 20:35:42 GMT

Is this able to get both TCP/UDP is the question, due to OpenVPN using UDP as its preferred method of connection, could possibly be OP opening 1194 on TCP and not UDP

Re: OpenVPN 1194

Whisper21 — Wed, 18 Oct 2023 21:20:50 GMT

Every port is reporting closed as the packets aren't even getting to my router.

Re: OpenVPN 1194

ghamilton123 — Wed, 18 Oct 2023 21:24:00 GMT

@Whisper21 then you've configured something wrong, the packets will be hitting your router

Re: OpenVPN 1194

Dan_the_Van — Thu, 19 Oct 2023 06:51:29 GMT

@Whisper21

The Hub One does not respond to pings or trace route as ICMP can not be enabled. To be able to ping the Hub a device has to be in the DMZ as this bypasses the Hub firewall

When did open VPN last work? With the current IP Address or the previous one?

With openVPN you really need a static IP address to prevent any reconfiguration as a result of a IP change.

Plusnet offer a static public IP Address for a one off fee of £5.00

Re: OpenVPN 1194

Whisper21 — Thu, 19 Oct 2023 12:30:54 GMT

I've set up the DMZ to push to my OpenVPN on the internal IP.

The VPN has never worked, I cannot get any reply from my router.

I've internally Pinged my router inside my home network using the gateway IP and I get a normal return.

I've pinged the OpenVPN internally and get a normal return.

As soon as I try to do it from the outside world, both are blocked and show 100% packet loss.

My IP is not static, but has been the same for a couple of weeks until this morning when it changed to a 46.208.....address. My VPN has been automatically updated thus.

Re: OpenVPN 1194

Dan_the_Van — Thu, 19 Oct 2023 13:29:10 GMT

It is not necessary to have the openVPN server in the DMZ, it would be more secure if it wasn't.

What platform/os and install method have you used to create the VPN? I used the instruction from this site https://www.pivpn.io/ and it was very simple. Are you using Dynamic DNS?

Have you tried connecting from anywhere else other than work? Port 1194 might be blocked to prevent employees doing what you are trying.

If the vpn connection is attempted then the event log (found in troubleshooting) of the Hub will report an IN:ACCEPT for a connection on UDP port1194, do you see any and what is the full message

Re: OpenVPN 1194

RichardB — Thu, 19 Oct 2023 13:38:53 GMT

Hi @Whisper21

When I have setup OpenVPN & wireguard servers, I did not need to use a DMZ.

The Routers port forwarding removed the need for a DMZ.

I would recommend breaking the problem down to find the issue.

Does the VPN server have a static LAN IP address?

Try connecting to the VPN server from a client on the LAN.

If that fails then the problem is not related to the routers port forwarding.

Regards

Richard

Re: OpenVPN 1194

machare — Thu, 19 Oct 2023 22:33:48 GMT

The OP might find it easier to get Wireguard working rather than OpenVPN.