Opened 8 months ago

Last modified 5 months ago

#1206 new Bug / Defect

OpenVPN Connect Android: route failure

Reported by: ninjanody Owned by:
Priority: major Milestone:
Component: Generic / unclassified Version: OpenVPN Connect for Android v3.0.1
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords:
Cc: yuriy

Description

I have a pfSense Firewall with OpenVPN server installed. I have all type of clients (Windows, Linux, IOS, Android) and all of them except Android are connecting and route the traffic via vpn. I can't even ping from the device the openvpn gateway or the opposite from android devices. From Windows or IOS device, i can ping all the internal routes and the gateway. So i figure that android does not route traffic through the vpn gateway as default. I have tried to redirect the gateway with "redirect-gateway def1" but it didn't work.

Versions:
Windows OpenVPNClient: 2.4.7
IOS OpenVPN Client: 3.0.2.(894)
Android OpenVPN Client: 3.0.5.(1816)

Devices:
PC: Windows 7 & Windows 10
IOS: Iphone 7, Iphone 8
Android: Samsung S7 Edge, Samsung S10, Galaxy Tab A (SM-T510)

Client Configs:
dev tun
persist-tun
persist-key
cipher AES-128-CBC
ncp-disable
auth SHA256
tls-client
client
resolv-retry infinite
remote 77.XX.XX.216 1194 udp
verify-x509-name "77.XX.XX.XX" name
auth-user-pass
remote-cert-tls server
compress
<ca>...</ca>
<cert>...</cert>

Attachments (1)

openVPN_Connect_Android_Log.txt (3.1 KB) - added by ninjanody 8 months ago.
OpenVPN Connect for Android Log

Download all attachments as: .zip

Change History (3)

Changed 8 months ago by ninjanody

OpenVPN Connect for Android Log

comment:1 Changed 8 months ago by ninjanody

The static 77.XX.XX.XX is forwarded at 192.168.20.50 (WAN).
The VPN subnet is 172.16.1.0/24 and 172.16.1.1 is OpenVPN GW.
The LAN subnet is 192.168.0.0/24 and DNSs are in this subnet.
The DMZ subnet is 192.168.20.0/24 and WAN is the Default GW.
The other subnets are

comment:2 Changed 5 months ago by Gert Döring

Cc: yuriy added
Version: OpenVPN Connect for Android v3.0.1
Note: See TracTickets for help on using tickets.