OPenVPN Issues - Port forwarding / DoubleNAT?

icetealight

I have a Sunrise Connect Box 3 Fibre.

That should be running on IP V4

on that Box - i got a Port Forwarding Rule for OpenVpn

The destination: 192.168.1.254 - is the “reserverd” IP of my Omada Network Controller ER2721PC (which runs also the OpenVPN Server)

There i have the following Rule

That finally should point at my OpenVPN Server

i simply cant get it connected with a openPVN client.

Does anybody see the configuration mismatch?

Thank you so much for the help

Xydocq

hello icetealight

Welcome to the community.

Your public IP address starts with a 1, that’s kinda strange and makes me wonder.

Does the address show 100.64.xxx.xxxx? If it does, you might want to call 0800 707 707.
Tell them you get a CGNAT IPv4 address and they should change the settings, so you’ll receive a public IPv4 address.

If possible use DMZ to point at your own Router, since the VPN runs on the Omada Router you don’t need to set any port forwarding rules on it.

icetealight

Xydocq

The Public IP is: 188.XXX.XX.XXX

should i still call the hotline?

Xydocq

icetealight

No need to call the hotline.

Xydocq

The next thing I would like to know.

If you log on to your Connect Box 3, is the IP address shown under Admin > Information the same address you got from the website?

icetealight

Xydocq

Yes the IP on

WAN IP settings / IPv4 address

is matching with the adress i have on the website

icetealight

i slowly start to thing that something is broken on the OpenVPN ????

from all i can see - everythign should match ?

I have put the Omada Gateway (192.168.1.254) now into the DMZ

deleted the port forwarding rule on the Sunrise box and also on the omada controller.

Still no connection possible. can it be that the port 1194 is somehow blocked ?

I cant see anything that would point into that direction to be fair

Xydocq

icetealight

I don’t use Omada, so I had to do some research.

The Settings at first seem to be ok but there are one or two things:

Do you have multiple WAN ports activated on your router? Or why is WAN set to WAN3?

The IP POOL, according to TP-Link’s Webseite should be 192.168.47.1/24

https://www.tp-link.com/ch/support/faq/3633/

icetealight

Xydocq

The ER2721PC is a 3in1 device (router/controller/switch) .

It has 2 SFP WAN Ports ( 1 + 2) and 2 Ethernet Wan Ports (3 + 4)

I have plugged in the Sunrise box on the POrt number 3.

Do need an ACL Rule to pass through the port 1194?

Xydocq

icetealight

In my understanding an ACL Rule isn’t needed.

In order to find out if it is the Connect Box 3 or the VPN Server not working properly. You can connect a device directly to the Connect Box 3 and try accessing the VPN server thru 192.168.1.254.

If the test fails: it might be the server
If the test succeeds: something seems to be wrong with the settings on the Connect Box 3

Also the TP-Link FAQ stated to forward both protocols (TCP and UDP). DMZ should take care of that.