Remote Acess with OPENVPN active

There are 12 replies in this Thread which was already clicked 2,065 times. The last Post () by caboche.

  • Hi!


    Does anybody know how to resolve this issue?


    I've configured the OpenVPN and now I've lost remote access to the receiver.


    I have local access on the same net but if I'm away from home I can't access the receiver.


    I don't understand it, because I'm using a fixed local IP, and my Router should foward all entrances on that port to that specific local IP.


    I wonder what I'm missing here! :thinking face:

  • Go to Best Answer
    • Official Post

    Your routing through a VPN, so your external IP address will be different (that's the whole idea of a VPN).

    Some VPN's offer a fixed IP addy - but most don't, you need to check what your actual external IP addy is when your running openVPN.

  • Thanks for ur answer!


    I don't know very well how it works, maybe that's why I can't understand it...


    I thought that when I do port forwarding on my router, every entrance for that specific door would be forwarded to the receiver's internal IP.


    So.. there is no way to do remote access when using OpenVPN plugin.


    Thats so sad.. Because I used my receiver to stream to my mobile and now I cant do it outside home. Only at home on internal network. :(

  • Your routing through a VPN, so your external IP address will be different (that's the whole idea of a VPN).

    Some VPN's offer a fixed IP addy - but most don't, you need to check what your actual external IP addy is when your running openVPN.

    but if he can connect and stream from local network, the box have a local ip too.

    If he connect from remote to the router and the router forward to the box local ip, it should work or not?

    • Official Post

    Your routing through a VPN, so your external IP address will be different (that's the whole idea of a VPN).

    Some VPN's offer a fixed IP addy - but most don't, you need to check what your actual external IP addy is when your running openVPN.

    but if he can connect and stream from local network, the box have a local ip too.

    If he connect from remote to the router and the router forward to the box local ip, it should work or not?

    Yes its possible to add the rules within the VPN to the forwarded router ports, but that is best done with a known IP address.

    Or use something like https://www.noip.com/ and make your own host name.

  • Hi Jenseneverest,


    I am in the same situation.

    After add openvpn plugin in openatv, I cannot stream to remote location.


    I have same service as noip, and before I add the vpn it was working fine.


    From local network it streams.

    From outside/remote location, I use the router “noip” service and the router forward to the box local ip, but does not work.


    From my point of view it is not a local network problem, it is some configuration that needs to be done.


    Am I right?

    Edited once, last by caboche ().

  • the situation is like this, with openvpn activated, new network interface is created (tun0), and all outgoing network traffic is going through gateway created on this tun0 interface, you can look at routing table with

    route -ne

    command

    so if you are connecting from remote location, incoming traffic arrives on eth0 interface, and receiver answering through tun0 interface

    so for example if you are connecting from ip address 12.34.56.78 you must put something like this on receiver - to tell it to answer on eth0 interface (gateway)


    route add -net 12.34.56.0 netmask 255.255.255.0 gw 192.168.1.1 dev eth0


  • But.. By doing that aren't we overriding the openVPN function.


    It would be interesting if there was a way to "bypass" VPN only for communications on a certain port. That way, the receiver would work with VPN, except for that specific port. In my case, it would be 8001 for streaming.


    Just dreaming out loud I think!

    • Official Post

    But.. By doing that aren't we overriding the openVPN function.


    It would be interesting if there was a way to "bypass" VPN only for communications on a certain port. That way, the receiver would work with VPN, except for that specific port. In my case, it would be 8001 for streaming.


    Just dreaming out loud I think!

    I have done similar with my router, where it is easy to assign what goes via the VPN and what dosn't.

    BTW - you can and should change your streaming port from 8001 (look at your openwebif settings) to something else, and set a good paswword for login to it.....

    especially if you plan on opening that port. There is hundreds of STB's on the web that are open to the world.....

  • how did you do that?

    • Best Answer

    If "Use VPN only for certain domains/hostnames - Super User" is searched, there are solutions, that comes to vpn client conf file, just short example, but still - this is not user friendly, clickable solution, and some knowledge is expected

    ---

    While the most common use case to is route everything through your VPN, there are two exception scenarios, when it comes to VPNs:

    You want mostly all traffic to go through the VPN, with a few exceptions
    You only have a couple of sites that you want to route through the VPN

    You can add this to the .ovpn file:

    Code
    allow-pull-fqdn
    route www.g00gle.com 255.255.255.255 net_gateway

    Then on openvpn startup this will lookup http://www.g00gle.com, get it's IP address, and then add a route for that using the net (not VPN).

  • So if I use the dynamic dns on router like a noip service, example xzp.com, we can change http://www.g00gle.com for the xzp.com in that line of code in openvpn config ?


    Not working :(


    Receiver: Zgemma H7S with client openvpn (without access to server configuration file).

    Dynamic DNS Example: xpz.com

    Router Forwarding the streaming port (8001) to Receiver local ip (example: 192.168.1.67)

    Router IP: 86.241.78.120 (changed for security reasons)

    Tablet with DreamDroid to connect to stream

    Tablet IP: 192.168.68.110


    Original openvpn client configuration file:


    Edited once, last by oktus: Merged a post created by caboche into this post. ().

Firmware, downloads and support for Zgemma H7 series.

Your community resource for the Zgemma H7 series satellite receiver — firmware images, channel lists, plugins and setup help.