Solved OpenVPN Server not working properly after DSM Update

[BobW]

Hello,

I have a bit of a problem with OpenVPN Server from Synology.

After the last DSM update, OpenVPN server no longer works properly. I can connect to the vpnserver from outside and get to see the IP of my ISP when I do an IP check, and other apps on my mobile have access to the internet.

But I can’t login via e.g. DSFile to access my LAN environment. I can't access my files on the DS.
I have tried this through IP and domain-name nether are working anymore.

I've already tried the following:
Reinstalled OpenVPN server
check all settings
firewall is open (because I can connect to the vpnserver)
port forwarding is also good in the router (because the connection to the vpnserver is established)

I know that everything worked well before the DSM update because my users were able to login normally before the update.
This is shown in the logfile.

Does anyone have similar problems or maybe a solution?
I don't know where to look for it anymore.

Thanks

 

[WST16]

Hi,

I’ve updated my NAS today to update-4. All seems fine.

I’m using OpenVPN and just tried it. Works fine. I can access everything as before. I even tried DS File. Works.

How about if we take it one step back. You’re saying you can establish a VPN connection.

Can you use your mobile data and establish the connection then on your home network (LAN) use a client to login to your NAS and run the VPN server console. Check “Connection List”. Does it show your mobile client in the list?

If it shows, can you try (from your VPN connected mobile device) to access the NAS itself? Forget about the clients on the LAN for now.

 

[BobW]

Hi,

I’ve updated my NAS today to update-4. All seems fine.

I’m using OpenVPN and just tried it. Works fine. I can access everything as before. I even tried DS File. Works.

How about if we take it one step back. You’re saying you can establish a VPN connection.

Can you use your mobile data and establish the connection then on your home network (LAN) use a client to login to your NAS and run the VPN server console. Check “Connection List”. Does it show your mobile client in the list?

If it shows, can you try (from your VPN connected mobile device) to access the NAS itself? Forget about the clients on the LAN for now.

Hi,

Yes I see my mobile connection in the Connection List, but I cannot acces the NAS by browser

 

[WST16]

Are you using the dynamic IP address assigned to the NAS or the LAN’s ip address?

 

[BobW]

Are you using the dynamic IP address assigned to the NAS or the LAN’s ip address?

I'm using the LAN's IP to connect the NAS through browser and also tried my domainname wich is what I normally use to connect to the NAS.

 

[WST16]

Can you try the dynamic IP address assigned by the VPN service?
It should be the first IP address in the dynamic range.

 

[BobW]

Can you try the dynamic IP address assigned by the VPN service?
It should be the first IP address in the dynamic range.

The IP 10.8.0.1 is the range I'm using for VPN and that isn't working ether

 

[WST16]

Just to make sure. This is what I’m referring to:

 

[BobW]

Just to make sure. This is what I’m referring to:

View attachment 696

Yes, all the same

 

[WST16]

Did you check the privilege page. Is the user allowed to use OpenVPN?

 

[BobW]

Did you check the privilege page. Is the user allowed to use OpenVPN?

Yes all user have granted acces

 

[WST16]

Did you try unchecking, saving, then checking and saving again

 

[BobW]

Did you try unchecking, saving, then checking and saving again

Yes I did and I also reinstalled the openserver package.

 

[WST16]

While connected, can you ping 10.8.0.1?
It should reply.

 

[BobW]

While connected, can you ping 10.8.0.1?
It should reply.

Do you mean ping from my mobile while connected to the VPN server?

 

[WST16]

Yes

 

[BobW]

Yes

Ping 10.8.0.1 get a 100% lost as result, so no connection

 

[WST16]

Ok. At least we‘ve found something. Not exactly that I know how to go around it though
Let‘s think. Why would that happen. Something to do with that dynamic range. Or something killing any connections to the dynamic range.
You said the firewall is disabled too.

How about if you try a different dynamic range.
I ran out of logical trials and going into the not so logical now

 

[BobW]

Ok. At least we‘ve found something. Not exactly that I know how to go around it though
Let‘s think. Why would that happen. Something to do with that dynamic range. Or something killing any connections to the dynamic range.
You said the firewall is disabled too.

How about if you try a different dynamic range.
I ran out of logical trials and going into the not so logical now

I've changed the IP range to 192.168.5.1 and tried to connect via my mobile and got connected. The Connection List show my connection but ping get lost again.

 

[WST16]

Ok. Same device (mobile phone?), put it on airplane mode and enable WiFi.
This way we take the router out of the picture and we’re on the LAN.
Connect to the VPN service. Can you ping?