OpenVPN behind WDS

2024-02-23 08:15:11

Posts: 12

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2024-01-25

OpenVPN behind WDS

2024-02-23 08:15:11

Tags: #VPN #WDS/Range Extender Mode

Model: Archer C7

Hardware Version:

Firmware Version:

I'm unable to connect to my VPN server on my C7 that's connected via WDS, what settings do I need to change or setup for the VPN server to be accessible from the internet?

Internet works fine for devices connected to main router and C7. And I can access local clients connected to either router when on my LAN.

My network looks like this

ISP <==wired==> main router <--WDS--> Archer C7

Main router settings:

Static IP from ISP

LAN 192.168.0.1/16

DHCP enabled

Reserved 192.168.0.2 for C7

Static routing 10.8.0.0/24 (VPN) to 192.168.0.2

C7 settings:

Static IP 192.168.0.2/16

Gateway+DNS 192.168.0.1

DHCP disabled

WDS enabled

OpenVPN enabled 10.8.0.9/24 over UDP (network and internet)

Everything else it on default settings.

Due to various reasons, the main router have to be the one connected to the ISP, while C7 have to connect over WDS.

7 Reply

LV7

2024-02-24 14:56:05

Posts: 7036

Helpful: 5244

Solutions: 1165

Stories: 7

Registered: 2013-10-12

Re:OpenVPN behind WDS

2024-02-24 14:56:05

In theory if your main router has a public IP address a DMZ in your main router to 192.168.0.2 should give you an access to the C7 VPN server.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".

LV1

2024-02-25 00:23:44

Posts: 12

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2024-01-25

Re:OpenVPN behind WDS

2024-02-25 00:23:44

@terziyski

Problem is that I already use dmz for something else, and I can't dmz two IP address.

Do I need to port forward ports on the main router for the VPN?

LV7

2024-02-25 14:43:12

Posts: 7036

Helpful: 5244

Solutions: 1165

Stories: 7

Registered: 2013-10-12

Re:OpenVPN behind WDS

2024-02-25 14:43:12

Yes, open these ports TCP 443, TCP 943 and UDP 1194.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".

LV1

2024-02-26 02:19:18 - last edited 2024-02-26 03:41:35

Posts: 12

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2024-01-25

Re:OpenVPN behind WDS

2024-02-26 02:19:18 - last edited 2024-02-26 03:41:35

@terziyski

After port forwarding, instead of timing out on connection, i'm getting a different error "Unable to get VPN permissions"
I tried rebooting both routers, but still the same error.
Any ideas?

side note, for some reason after forwarding those 3 port, my main router now forwards all 192.168.0.1 request to 192.168.0.2, I think it's beacuse of port 443

LV7

2024-02-26 06:37:15

Posts: 7036

Helpful: 5244

Solutions: 1165

Stories: 7

Registered: 2013-10-12

Re:OpenVPN behind WDS

2024-02-26 06:37:15

I have no idea what this message means but I found a thread mentioning this issue - here.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".

LV1

2024-02-26 08:36:32 - last edited 2024-02-26 08:36:59

Posts: 12

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2024-01-25

Re:OpenVPN behind WDS

2024-02-26 08:36:32 - last edited 2024-02-26 08:36:59

@terziyski

Tried a bunch of solutions online, nothing worked. Even tried DMZ.

Is there a possibility that VPN only works over WAN port, and not with WDS?

LV7

2024-02-26 09:13:27

Posts: 7036

Helpful: 5244

Solutions: 1165

Stories: 7

Registered: 2013-10-12

Re:OpenVPN behind WDS

2024-02-26 09:13:27

It could be, but I must to admit that I haven't tested this personally.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".