RUTX50: access LAN machines over OpenVPN Client

Hi,

I’ve a RUTX50, with OpenVPN Client TUN connected to our server (via Mobile LTE connection). I need to forward TCP port to a LAN machine IP, to access it from here (server side).

It sounds simple, but I can’t seem to do it.
Someone could help me ?
Thanks a lot.

Hello,

Is the OpenVPN server running on a Teltonika device or on a different platform?

It would also be useful to review our OpenVPN configuration wiki article, which covers how to access OpenVPN clients from the server side, available here:

Please don’t hesitate to share any additional, relevant information that could be helpful here.

Best regards,

Hi,
The server is a OpenVPN Server on a linux server elsewhere.
Client is working fine, I can access to the Teltonika config web server perfectly through.
But I cannot acces to the internal machine port inside the LAN part of the RUTX50.
I don’t understand how to make forwarding packets from and to the ovpn client part and the LAN part of the RUTX50.
Thanks for your help.

Hello,

Do you have access to the VPN server configuration? From the initial description, it sounds like you are on the server side of the connection.

If not, please check whether there is a correct route to the RUTX50 LAN subnet defined in the server configuration and pushed to the connected clients. Without this route, packets won’t be forwarded properly to RUT’s LAN network.

Could you also share a simple topology diagram (including IP addresses of the server, client, and LAN networks) and the routing table output from the server’s LAN side (route -n)?

Best regards,

Hi,

We’ve got a public OpenVPN Server (linux) outside 10.1.0.1/16

We’ve got a lot of RUT other places, connected internet via LTE.
All RUT are connected as OpenVPN Client to the OpenVPN Server, on a same subnet.
One RUT is connected ovpn 10.1.X.254. Another RUT is ovpn 10.1.X.254
etc… IP are push by server, auth based.

All RUT LAN IF are directly connected to their PC IF, with a IP like 192.168.X.YYY or 192.168.X.YYY. These PC have opened TCP port: We want a PC can reach TCP Port of another PC.

Regards,

Since you are able to access the web interface via RUTX50 LAN ip (?) the routing should be ok. Point the default GW of the PC to the RUTX50?

Maybe SNAT help?

But it’s hard to help without exactly knowing your network and routing.

This topic was automatically closed after 60 days. New replies are no longer allowed.