RUT VPN Hub LAN to LAN

[lindbergjosef]

Hi!
I’ve tried your LAN to LAN and VPN hub manual but I can’t make it work.
I’m trying to connect two different devices on two different RUTs. The devices are supposed to connect to each other. END1 on RUT1 i supposed to connect with END2 on RUT2.
When my PC is connected to RUT1 I can ping from RUT1 CLI to END2.
When my PC is connected to RUT2 I can ping from RUT2 CLI to END1.
When my PC is connected to RUT1 I can not ping (CMD) from my computer to END2.
When my PC is connected to RUT2 I can not ping (CMD) from my computer to END1.

But when I have my OpenVPN connection connected I can ping to both END-devices and the END-decives can also connect to each other. In other words, everything works when my OpenVPN is connected but not without it.

What can I do to connect END1 with END 2 without have my computer and OpenVPN online?

[lindbergjosef]

[lindbergjosef]

I want the devices 10.0.0.201 and 10.0.1.201 to communicate

[AndzejJ]

Hello,

Could you please check if the RMS zone in Network → Firewall allows forwarding to and from LAN zone?:

Also, please share the IPv4 routes from Status → Routes → Static.

Kind Regards,

[lindbergjosef]

This is from RUT240 RUT2:

[lindbergjosef]

[lindbergjosef]

This is RUTX50 RUT1:

[lindbergjosef]

[AndzejJ]

Hello,

The configurations look correct.

On you PC, could you try pinging the end device by specifying a source IP as well?

Check the IP addess on PC (interface which is connected to RUT) with ipconfig and then, depending on which IP you get and RUT to which you are connected to:

ping 10.0.1.201 -S 10.0.0.x
ping 10.0.0.201 -S 10.0.1.x

Do pings go through?

Kind Regards,

[lindbergjosef]

Hello,

Ping goes through sometimes

Wireless LAN adapter Wi-Fi:
Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::d17d:256e:538f:a02f%19
IPv4 Address. . . . . . . . . . . : 10.0.0.102
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.0.1

C:\Users\Elvida>ping 10.0.1.201 -S 10.0.0.102

Pinging 10.0.1.201 from 10.0.0.102 with 32 bytes of data:
Request timed out.
Reply from 10.0.1.201: bytes=32 time=425ms TTL=253
Reply from 10.0.1.201: bytes=32 time=126ms TTL=253
Reply from 10.0.1.201: bytes=32 time=296ms TTL=253

C:\Users\Elvida>ping 10.0.1.201 -S 10.0.0.102

Pinging 10.0.1.201 from 10.0.0.102 with 32 bytes of data:
Reply from 10.0.1.201: bytes=32 time=327ms TTL=253
Reply from 10.0.1.201: bytes=32 time=126ms TTL=253
Reply from 10.0.1.201: bytes=32 time=216ms TTL=253
Reply from 10.0.1.201: bytes=32 time=159ms TTL=253

---

Wireless LAN adapter Wi-Fi:
Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::d17d:256e:538f:a02f%19
IPv4 Address. . . . . . . . . . . : 10.0.1.102
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.1.1

C:\Users\Elvida>ping 10.0.0.201 -S 10.0.1.102

Pinging 10.0.0.201 from 10.0.1.102 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

C:\Users\Elvida>ping 10.0.0.201 -S 10.0.1.102

Pinging 10.0.0.201 from 10.0.1.102 with 32 bytes of data:
Reply from 10.0.0.201: bytes=32 time=148ms TTL=253
Reply from 10.0.0.201: bytes=32 time=113ms TTL=253
Reply from 10.0.0.201: bytes=32 time=378ms TTL=253
Reply from 10.0.0.201: bytes=32 time=134ms TTL=253

Ping statistics for 10.0.0.201:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 113ms, Maximum = 378ms, Average = 193ms

Pinging 10.0.0.201 from 10.0.1.102 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Reply from 10.0.0.201: bytes=32 time=108ms TTL=253

Ping statistics for 10.0.0.201:
Packets: Sent = 4, Received = 1, Lost = 3 (75% loss),
Approximate round trip times in milli-seconds:
Minimum = 108ms, Maximum = 108ms, Average = 108ms

C:\Users\Elvida>ping 10.0.0.201 -S 10.0.1.102

Pinging 10.0.0.201 from 10.0.1.102 with 32 bytes of data:
Reply from 10.0.0.201: bytes=32 time=401ms TTL=253
Reply from 10.0.0.201: bytes=32 time=126ms TTL=253
Reply from 10.0.0.201: bytes=32 time=312ms TTL=253
Reply from 10.0.0.201: bytes=32 time=124ms TTL=253

Ping statistics for 10.0.0.201:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 124ms, Maximum = 401ms, Average = 240ms

C:\Users\Elvida>ping 10.0.0.201 -S 10.0.1.102

Pinging 10.0.0.201 from 10.0.1.102 with 32 bytes of data:
Request timed out.
Request timed out.
Reply from 10.0.0.201: bytes=32 time=153ms TTL=253
Reply from 10.0.0.201: bytes=32 time=330ms TTL=253

[lindbergjosef]

I noticed now that if i disconnect all other interfaces and only use the RUT-connected interface, the ping sometimes goes through, even if I dont specify the source IP.
But why is it only some of the Pings that goes through? I’ve tried several times now and only 2/3 of the pings goes trough.
This also explains why I get short disconnections when I use OpenVPN-client and tries to work on my device.

[AndzejJ]

Hello,

This confirms that the connection is there. The issue was that your PC used a different interface to route the packets because it does not have a route to the other network.

However, the dropped packets are probably caused by something else. Could you please try to delete and re-create a VPN Hub? If it does not help, can you try re-creating a Hub and select a different server (if you are using Bahrain for example, try Germany). Let me know how it goes.

Kind Regards,

[lindbergjosef]

Hello,
I see.

Re-creating didn’t help. I will try the Bahrain server tomorrow. I’m located in Sweden and used Germany server.
I will attach a log file from OpenVPN from 14:58 today when I connected and shortely after got disconnected again, if you can understand anything from there?

OpenVPN logfile.zip (2.7 KB)

[lindbergjosef]

Hello,

The Bahrain server helped and solved my case.

Thanks for your support!