OpenVPN 1194

[#1]

Hive,

I'm struggling with OpenVPN.  All my port forwarding is done correctly, and DMZ and firewalls have been disabled.

When I try to ping the router the tracert shows that the packets are being blocked by a PN server.

Is there a solution to this problem, or is there a workaround, please?

thanks

Richard

[#2]

@Whisper21 welcome to the forum.

Which Hub and VPN server are you using?

Does your Hub respond to pings?

[#3]

PN Hub One

OpenVPN

No, the router is not responding to a plain ping, 100% loss.

Done a TraceRoute from a PC at work, got 9 hops and then stalled.

9	core1-hu0-2-0-2.colindale.ukcore.bt.net	195.99.127.65	gb	19.133 ms
	core1-hu0-2-0-2.southbank.ukcore.bt.net	195.99.127.69	gb	19.240 ms
	core1-hu0-15-0-4.southbank.ukcore.bt.net	109.159.252.141	gb	18.971 ms

Thanks for your help

[#4]

I'm pretty sure the Hub one won't ( and can't be configured to ) respond to a ping from the WAN.

This thread https://community.plus.net/t5/Tech-Help-Software-Hardware-etc/Hub-One-WAN-Ping-ICMP/td-p/1304450 may help with possible workarounds

[#5]

Moderators Note

This topic has been moved from Broadband to Tech Help

[#6]

openVPN will work through a Hub One, I have used a raspberry pi 2 connecting with UDP protocol only and had no issues, but since moved to wireguard on a pi 3.

What does the port forward rule look like? Do have a static public IP Address or using something else?

[#7]

Not always a static IP, but it hasn't changed for a few weeks.

Port forwarding set up on specific ports and set to my VPN servers' internal IP.

As per my post the packets seem to be getting stopped long before they get anywhere near my router.

[#8]

Would you be able to perform a port scan from a EXTERNAL network, and see if 1194 is open? 

[#9]

You can use https://www.yougetsignal.com/tools/open-ports/ to check whether your port is open or not.

[#10]

Is this able to get both TCP/UDP is the question, due to OpenVPN using UDP as its preferred method of connection, could possibly be OP opening 1194 on TCP and not UDP

[#11]

Every port is reporting closed as the packets aren't even getting to my router.

[#12]

@Whisper21 then you've configured something wrong, the packets will be hitting your router 

[#13]

@Whisper21 

The Hub One does not respond to pings or trace route as ICMP can not be enabled. To be able to ping the Hub a device has to be in the DMZ as this bypasses the Hub firewall

When did open VPN last work? With the current IP Address or the previous one?

With openVPN you really need a static IP address to prevent any reconfiguration as a result of a IP change.

Plusnet offer a static public IP Address for a one off fee of £5.00

[#14]

I've set up the DMZ to push to my OpenVPN on the internal IP.

The VPN has never worked, I cannot get any reply from my router.

I've internally Pinged my router inside my home network using the gateway IP and I get a normal return.

I've pinged the OpenVPN internally and get a normal return.

As soon as I try to do it from the outside world, both are blocked and show 100% packet loss.

My IP is not static, but has been the same for a couple of weeks until this morning when it changed to a 46.208.....address.  My VPN has been automatically updated thus.

[#15]

It is not necessary to have the openVPN server in the DMZ, it would be more secure if it wasn't.

What platform/os and install method have you used to create the VPN? I used the instruction from this site https://www.pivpn.io/ and it was very simple. Are you using Dynamic DNS?

Have you tried connecting from anywhere else other than work? Port 1194 might be blocked to prevent employees doing what you are trying.

If the vpn connection is attempted then the event log (found in troubleshooting) of the Hub will report an IN:ACCEPT for a connection on UDP port1194, do you see any and what is the full message