VPN works, but public IP doesnt seem tunneled through (RBK50)

Question

With the latest firmware version (V2.0.0.74) I have set up VPN -with NETGEAR DDNS.

Downloaded the opvn files to iPhone and when I enable VPN (openVPN app) it looks like its all fine.

My RemoteManagement setting is disabled. But while VPN is active, I can login to orbis management interface with 192.168.x.1 -> This shows that VPN really works

But on my iphone when i go to http://www.whatsmyip.org/, it doesnt give me the public IP of my home, it shows the same IP when VPN is off -> This shows VPN doesnt really work.

Could you help me clarify, whats going on?

Kind regards,

st_shaw · Answer

VPNs do not always route all traffic through the remote server by default. This is set in the VPN configuration file.
&nbsp;
When you setup the VPN on Orbi make sure you check the box that says, "Clients will use this VPN connection to access"...&nbsp; "All sites on the Internet and Home Network."

korayb · Answer

Thanks, I did exactly as&nbsp;you said.It told me to redownload the ovpn file, I did.I deleted the old ovpn from the phone, imported the new one. (I use openVPN application).Now, when VPN is turned on, i cannot access anything, including the router admin page.So my problem became: &nbsp;VPN doesnt work at all, although I followed the instructions and didnt do anything fancy.Should I create a new topic as "VPN Doesnt work?"Thanks,

st_shaw · Answer

I don't think you need a new topic.
&nbsp;
It makes sense you needed to download a new ovpn file. &nbsp;That's where the settings are saved, so anytime you change settings, the new file must be downloaded and transferred to your phone.
&nbsp;
Can you give some more information on how things are connected when nothing works? Apologies if any of the questions seem dumb, but I don't know anything about your setup or knowledge level. Some things to consider:
1. Are you sure your router is accessible from the Internet?
2. Can you get something simpler to work first, like Remote Access, to establish the router can be reached remotely? &nbsp;See page 107 of the user manual here:&nbsp;http://www.downloads.netgear.com/files/GDC/RBK50/Orbi_UM_EN.pdf
3. If you change the settings back to Auto, can you access the VPN as before?
4. Are you connecting from either 1) outside your home, or 2) from inside but with the phone WiFi disabled so the cellular radio is used?
5. Have you tried the VPN&nbsp;from a Mac or Windows client?
&nbsp;
This video has a decent walkthrough of the setup.
&nbsp;
https://www.youtube.com/watch?v=7CRKV2DfugI
&nbsp;

korayb · Answer

Hi,&nbsp;Thanks for your answers.&nbsp; I went over every line of your message and provided extensive info🙂 Therefore it is a long message.&nbsp; Thanks for your time.&nbsp;I am an IT professional.&nbsp; Have 6 years of programming, 6 years of business analysis and 6 years of it project management experience under my belt.&nbsp; Not a network expert at all, but have a basic understanding of NAT, DNS, Network Masks etc.&nbsp;&nbsp;To test the VPN, I turn off wifi on my phone. &nbsp;I verify that I get a new public IP from the cell provider, e.g.84.241.xxx.yyyyI openVPN app on the phone, I enable the VPN connection.With the current setting (All sites on the Internet &amp; Home Network selected) thats the last meaningful thing I can do on the phone.From this point on, nothing is accessible, neither google.com nor 192.168.1.1 (orbit admin)&nbsp;At the same time, I go to the ORBI logs. &nbsp;There I can see that the openVPN was successful: [OpenVPN, connection successfully] from remote IP address: 84.241.xxx.yyyy&nbsp;Therefore I think the router is accessible from the internet.&nbsp;When "automatic" was selected instead of "All sites on the Internet &amp; Home Network", and the VPN worked, I could access orbi admin page.&nbsp; whats strange now is that even this doesnt work.&nbsp;i had not enabled remote access before, in order not to run into other issues. &nbsp;I had enjoyed the idea of being able to do this through the vpn. &nbsp;But upon your message, i enabled it. &nbsp;&nbsp;I closed the VPN on my phone. &nbsp;Typed in “https://myname.mynetgear.com:8444” -i customised the port just in case-. &nbsp;Safari didnt even let me connect to this site “connection is not private”.&nbsp;chrome also didn’t want me to go to this site.&nbsp; but at least I could insist to proceed to the site. &nbsp;ORBI said “another admin is logged in - yes, the admin page was open in my mac- and it will have to be kicked out”. &nbsp;I said “yes, please”.&nbsp;And I could see the admin page.&nbsp;So yes.&nbsp; I can do remote management (although the browsers don’t like its security).&nbsp;from logs:&nbsp; [remote login] from source 84.241.xxx.yyy&nbsp;&nbsp;Next step for me was to disable the remote management. &nbsp;I didn’t have to re-login as admin (that what the message said during the remote management experiment - another issue?)&nbsp;&nbsp;no, i don’t have any of my browsers remember orbi admin page credentials. 🙂&nbsp;After the remote management is turned off, I could no longer do vpn on my phone now.&nbsp; I hanged during “waiting for server” step.&nbsp;I deleted and re-downloaded the opvn file from ORBI.&nbsp; Now it connects but still, although “automatic” is selected, I can no longer go to 192.168.1.1.&nbsp;I don’t have windows machines that I have admin rights to.&nbsp;The macs I have are inside the house so testing VPN with them is moot.&nbsp;Since the instructions consisted of 3 steps with DDNS and 3 steps with VPN, I didn’t watch any movies.&nbsp; I will watch the video in your link today, in case there is something that i miss.&nbsp;One more important detail: &nbsp;&nbsp;I have a box from my internet provider(KPN).&nbsp; it has my public ip on one side and 192.168.2.X on the other.I turned off its wifi capabilities. &nbsp;&nbsp;The only thing connected to this box -with a cable- is ORBI. &nbsp;I arranged so that ORBI has DHCP Static IP - Using MacADDRESS:&nbsp; 192.168.2.100. &nbsp;Furthermore, I enabled DMZ setting for 192.168.2.100 on the KPN Box.I expect any public traffic to it hitting the ORBI box.&nbsp;In my earlier attempts I tried to do this with port forwarding.&nbsp; It worked for a while then it stopped. &nbsp;So I shifted to the DMZ option.&nbsp;&nbsp;As the remote management test shows, this seems to be working.&nbsp;However lets look at the ORBI now.- DDNS points to my public IP.&nbsp; Public IP hits KPN box.&nbsp; KPN Box (LAN IP:&nbsp; 192.168.2.254) (through DMZ setting) sends everything to 192.162.2.100 (Public side of ORBI).&nbsp; ORBI’s LAN side is 192.168.1.X (x=1 being orbi itself)- When I check my phone - when the VPN is connected (but no traffic is passing through)server is myname.mynetgear.com (check)server ip is my public ip (check)&nbsp;but VPN IPv4 is 192.168.2.2.&nbsp; So I am on the KPN BOX space, not the ORBI space.&nbsp;This might be the issue.&nbsp; But I don’t know how to solve this problem.&nbsp; I thought the DMZ setting on the KPN box would solve it but no.&nbsp;So whats the suggested way to VPN, when ORBI is behind a consumer grade modem/router (when the wifi is turned off and ORBI is being used for it)&nbsp;&nbsp;Many Thanks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

korayb · Answer

Giving it a little bit more thought, I no longer think that IP’s problem. If Warby had a public IP, my phone would appear just like another public IP. And right now 192.168.1.x space is the public space as far as the Orby is concerned.Nevertheless the carpet and box might be complicating the situation. Looking forward to hearing your advice

Forum Discussion

VPN works, but public IP doesnt seem tunneled through (RBK50)

9 Replies