Opened 5 years ago

Closed 19 months ago

#1206 closed Bug / Defect (wontfix)

OpenVPN Connect Android: route failure

Reported by: ninjanody Owned by: denys
Priority: major Milestone:
Component: Generic / unclassified Version: OpenVPN Connect for Android v3.0.1
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:
Cc: yuriy

Description

I have a pfSense Firewall with OpenVPN server installed. I have all type of clients (Windows, Linux, IOS, Android) and all of them except Android are connecting and route the traffic via vpn. I can't even ping from the device the openvpn gateway or the opposite from android devices. From Windows or IOS device, i can ping all the internal routes and the gateway. So i figure that android does not route traffic through the vpn gateway as default. I have tried to redirect the gateway with "redirect-gateway def1" but it didn't work.

Versions:
Windows OpenVPNClient: 2.4.7
IOS OpenVPN Client: 3.0.2.(894)
Android OpenVPN Client: 3.0.5.(1816)

Devices:
PC: Windows 7 & Windows 10
IOS: Iphone 7, Iphone 8
Android: Samsung S7 Edge, Samsung S10, Galaxy Tab A (SM-T510)

Client Configs:
dev tun
persist-tun
persist-key
cipher AES-128-CBC
ncp-disable
auth SHA256
tls-client
client
resolv-retry infinite
remote 77.XX.XX.216 1194 udp
verify-x509-name "77.XX.XX.XX" name
auth-user-pass
remote-cert-tls server
compress
<ca>...</ca>
<cert>...</cert>

Attachments (1)

openVPN_Connect_Android_Log.txt (3.1 KB) - added by ninjanody 5 years ago.
OpenVPN Connect for Android Log

Download all attachments as: .zip

Change History (6)

Changed 5 years ago by ninjanody

OpenVPN Connect for Android Log

comment:1 Changed 5 years ago by ninjanody

The static 77.XX.XX.XX is forwarded at 192.168.20.50 (WAN).
The VPN subnet is 172.16.1.0/24 and 172.16.1.1 is OpenVPN GW.
The LAN subnet is 192.168.0.0/24 and DNSs are in this subnet.
The DMZ subnet is 192.168.20.0/24 and WAN is the Default GW.
The other subnets are

comment:2 Changed 5 years ago by Gert Döring

Cc: yuriy added
Version: OpenVPN Connect for Android v3.0.1

comment:3 Changed 4 years ago by Gert Döring

Owner: set to yuriy
Status: newassigned

comment:4 Changed 4 years ago by Gert Döring

Owner: changed from yuriy to denys

comment:5 Changed 19 months ago by Gert Döring

Resolution: wontfix
Status: assignedclosed

OpenVPN Inc does not want to receive any feedback for the "Connect"
OpenVPN clients via the community bug trackers (here and in GH issues).

Please resubmit - if still relevant - via https://support.openvpn.net/

(Generally speaking, I would recommend to use "OpenVPN for Android" (ics-openvpn), and not "OpenVPN Connect")

Note: See TracTickets for help on using tickets.