$$$ Figure out DD-WRT VPN Connection $$$

[GeekOrGuru]

We have a client w/7-8 remote sites w/Linksys WRT600N routers running DD-WRT v24 SP-1 VPN.

DD-WRT is running OpenVPN. Untangle is running OpenVPN. Theoretically the two should talk...right? Well, it appears that the two are using two different cipher encryptions.

We have figured out the issue w/the cipher encryption and been able to successfully make a VPN connection back to Untangle, but are having problems with routing traffic.

Basically...we are in a huge pinch here! We are willing to pay for a solution either DD-WRT>Untangle or DD-WRT>DD-WRT that will allow two-way "routed" VPN traffic!!!

Anyone feel confident enough that they can get this to work? Anyone want to take bragging rights on supposedly getting something to work that others say can't be done...while getting paid for it!

Please help!!!

[Silver Bullet]

Does it have to be openvpn?

[GeekOrGuru]

Does it have to be openvpn?

No...the only requirements are:
1) utilize same hardware (WRT600N routers) at remote sites...firmware can be changed if required, but not preferred
2) must be two-way routable VPN
3) cannot require purchase of other software/hardware

[Silver Bullet]

Ok... are you going to give me ssh and Remote admin access to the untangle server?

Are you going to configure the DD-WRT routers once I finish the Untangle server?

What version Untangle are you running now.

This is going to be a PPTP vpn. I am most positive that DD-WRT supports acting as a PPTP client. If you can just log in to one of your DD-WRT routers and confirm that the firmware you have does indeed, then this will be over shortly.

[Silver Bullet]

BTW... how much money are we talking about here?

[GeekOrGuru]

Ok... are you going to give me ssh and Remote admin access to the untangle server?

Are you going to configure the DD-WRT routers once I finish the Untangle server?

What version Untangle are you running now.

This is going to be a PPTP vpn. I am most positive that DD-WRT supports acting as a PPTP client. If you can just log in to one of your DD-WRT routers and confirm that the firmware you have does indeed, then this will be over shortly.

Yes...we can provide you with whatever is required.

We are capable of configuring the DD-WRT routers as long as we know what is required.

Version is 6.02; that's the most current correct?

As far as the PPTP...they are running now as a PPTP client authenticating w/Win 2003 server. Client to Server communication is fine. Server to Client communication does not work.

PPTP client is a one way VPN...correct?

[Silver Bullet]

In that case, you can just leave it as is and put routes in your Untangle box (if it's the gateway) and it should make it completely routeable.

destination <remote site1 subnet> mask <remote site1 mask> gateway <ip address of the 2k3 box>

Rinse and repeat for each site.

[Silver Bullet]

Wait... are you saying that the 2k3 server can't reach the DD-WRT that is acting as a client?

[GeekOrGuru]

Wait... are you saying that the 2k3 server can't reach the DD-WRT that is acting as a client?

That is correct.

DD-WRT are connected and communicating fine with HOST network.

HOST network cannot "initiate" communication back to DD-WRT.

[Silver Bullet]

I told you wrong. I just re-created your scenario.

1st make sure that you don't have the PPTP client on the DD-WRT router set NAT. In other words... disable NAT PPTP settings on DD-WRT

Next, make sure that you can ping the ip address of the dd-wrt router's PPTP ip address from the remote subnet. You should be able to as it should be on the same subnet as the remote net.

Then create your routes on your gateway device like so.

Destination <remote subnet> mask <mask of remote subnet> gateway <ip address of the dd-wrt pptp address>

That works... I just tested it.

[dknyinva]

Hint...have you looked at dd-wrt wiki I've used dd-wrt for the past two years and have configured both OpenVPN and PPTP

[GeekOrGuru]

I told you wrong. I just re-created your scenario.

1st make sure that you don't have the PPTP client on the DD-WRT router set NAT. In other words... disable NAT PPTP settings on DD-WRT

Next, make sure that you can ping the ip address of the dd-wrt router's PPTP ip address from the remote subnet. You should be able to as it should be on the same subnet as the remote net.

Then create your routes on your gateway device like so.

Destination <remote subnet> mask <mask of remote subnet> gateway <ip address of the dd-wrt pptp address>

That works... I just tested it.

Give me a few minutes here to test and I'll get back to you.

The PPTP solution is not ultimately what this client is desiring, but it will work as a temporary work around.

As far as the route...I'm a little confused here. Lack of sleep! Anyways...if we set the gateway to the PPTP address (which is handed out by the WIN2k3 server) what happens when the remote router (DD-WRT) is rebooted and reconnects...won't it get a new ip address from the WIN2k3 server pool. As far as I know there is no way to set a reservation for PPTP. Am I missing something or having an IDTENTANGO (ID10T) moment?

[GeekOrGuru]

Hint...have you looked at dd-wrt wiki I've used dd-wrt for the past two years and have configured both OpenVPN and PPTP

We have spent HOURS scouring the DD-WRT forums and Wiki as well as here too. We have not been able to come up with anything conclusive that says "how" anyone has been able to successfully make an "OpenVPN" connection from DD-WRT to Untangle.

Are you saying that you have successfully done this?

[Silver Bullet]

Sure you can make it static. Look under the properties of the user that you are using for the connection. Specifically, the Dial-In tab.

[GeekOrGuru]

Sure you can make it static. Look under the properties of the user that you are using for the connection. Specifically, the Dial-In tab.

OK...I've assigned my PPTP user and address of 192.168.25.200. I've successfully connected to my 2003 server from the PPTP client on DD-WRT. I can ping through to anything on the HOST network.

I assigned the static route on the gateway as advised with the gateway <192.168.25.200>. I get a TTL error when trying to ping back to the remote router. I also tried to access the web interface of the remote router from the HOST.