1

I have set up an OpenVPN server to which I can succesfully connect from Android and iOS devices.

I am having troubling setting up my Ubuntu 18.04 machine as a client. I installed the gnome OpenVPN client so I could connect via the Network Manager. Having done so with the openvpn file and password provided by the server, I get the message that I succesfully connected to the VPN server.

However, I cannot actually reach the VPN network; in fact, I do not even get a response when I ping the VPN server on my client machine.

What could be causing this? There is no firewall enabled on the client side.

Edit: just tried connecting with

sudo openvpn --config [ovpn file name] 

instead. Worked flawlessly. So the problem is with the network manager. Does it somehow not import the right settings from the *.ovpn file?

Edit 2 on request: When connected to VPN through CLI command: I can ping 8.8.8.8 and any machine on the local network. When supposedly "connected" to the VPN through network manager GUI I can ping neither 8.8.8.8, nor any machine on the local network, nor the server itself.

1

You said you can connect i.e. from a phone. Well it says connected...ok. Does the VPN Server side knows what to do with your traffic? Same goes for your Linux machine. Its connected meaning you got authenticated. Does the server knows what to do with your network traffic?

Here's an example... 000 #1287: "ciscoxxxxx" STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 1845s; newest IPSEC; eroute owner 000 #1287: "ciscoxxxxx" esp.yyyyy@xxx.xxx.xxx.xxx (0 bytes) esp.yyyyy@xxx.xxx.xxx.xxx (0 bytes); tunnel 000 #1286: "ciscoxxxx2" STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 1503s; newest IPSEC; eroute owner 000 #1286: "ciscoxxxx2" esp.yyyyy@xxx.xxx.xxx.xxx (3496 bytes, 35s ago) esp.cyyyyd@xxx.xxx.xxx.xxx (0 bytes); tunnel 000 #1281: "ciscoxxxx2" STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 78757s; newest ISAKMP From the above we can see my VPN Server has established connections.

root#iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination

Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- x.x.x.x(an ip here) xxx.xxx.xxx.0/24 policy match dir in pol ipsec reqid 16392 proto esp ACCEPT all -- xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx policy match dir out pol ipsec reqid 16392 proto esp the above is rules to my VPN Server tell him what to do with the traffic received from which source and where to route it. so ...on and on and on depending on your rules/needs.

ofc its not the same software maybe but the set up its pretty much the same

  • Although I must admit your answer was too technical for my limited knowledge, I do think the problem is not on the server side. As I added to the question, connecting through the CLI works perfectly, the problem is with the network manager. – Bib-lost Oct 3 '18 at 7:52
  • try this then. While connected to the VPN try to traceroute an internet IP. (example 8.8.8.8) google dns. Post the resaults. – Fanosss test Oct 3 '18 at 8:10
  • Pinging works when connected through the CLI tool, but not when connected through the network manager. In the latter case, I cannot even ping the server. – Bib-lost Oct 3 '18 at 8:31
  • follow these steps please. 1.Connect to VPN 2. Open terminal 3. Ping www.google.com 4. ping 8.8.8.8 5. ping your gateway and a local IP of your network (not localhost) 6. post the resaults. – Fanosss test Oct 3 '18 at 9:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.