Openvpn with an Apple router

Discussion in 'Networking' started by Todd Schmidt, Jun 17, 2019.

Share This Page

  1. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    The vpn is on my synology.

    So for BI do I just disable the wan access under the web server tab? And leave the lan IP address?
     
  2. catcamstar

    catcamstar Getting comfortable

    Joined:
    Jan 28, 2018
    Messages:
    959
    Likes Received:
    582
    Hang on, we might be talking about two different things: what are the current IP addresses on the two NICs in your BI pc? I think the one carrying 192.168.xx is the one to your apple router, the 10.x is the one towards your CAMs.

    If that is correct: do you mean "wan access" on the 192.168.xx interface? If you disable that, you won't be able to reach BI anymore. If you mean 10.x: there should not be any traffic there.

    If you mean with "wan access" your ISP's public ip address: that should be removed immediately: openVPN is thé way to connect from now on.

    Hope this helps!
    CC
     
  3. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    So the secondary nic going to cameras is 192 while the primary internet connected is 10. Right now, remote access through Bi is using my wan (public ip), I guess I need to delete that.
     
  4. catcamstar

    catcamstar Getting comfortable

    Joined:
    Jan 28, 2018
    Messages:
    959
    Likes Received:
    582
    Hmmm yes, affirmative. And if you had put a port forward from your wan public ip to that bi pc, delete that also immediately.
     
    aristobrat likes this.
  5. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    Ok that’s what I thought. Thanks for confirming.
     
  6. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    So it worked on the BI pc, using the ui3, but now won’t work through the app, with vpn running. Any thoughts? Do I use the pc ip of 10.0.0.213 or the cameras network ip of 192.168.1.1?
     

    Attached Files:

  7. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    I’m wondering if maybe it’s something in the firewall maybe. The vpn connects fine, but it keeps saying can’t reach server.
     
  8. catcamstar

    catcamstar Getting comfortable

    Joined:
    Jan 28, 2018
    Messages:
    959
    Likes Received:
    582
    Well, you won't be the first shouting "my VPN server works" while actually some configuration settings are "missing". Unfortunately, debugging is a bit difficult when being on a mobile device (because ping/traceroute commands are not easily available).

    But briefly explain us the steps you took to setup openvpn on Synology:
    - you installed the package
    - you configured the package: OpenVPN active on port 1194?
    - you did tick the box "allow clients to connect to lan"?
    - you configured your router to forward INTERNET traffic to the synology 1194?

    Then you did what exactly? You installed openVPN client on your mobile device, entered your INTERNET (WAN) IP? Or did you import the .ovpn file?
    When you enter your credentials, is the light going to green?
    What do you see in the "connected clients" list on Synology?

    From here on, we can debug further down the road.
     
  9. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    Yes, to everything.,.ovpn file was imported, phone shows up on connection list.

    Going to change everything to the pc's ip and see if that fixes it.
     
  10. catcamstar

    catcamstar Getting comfortable

    Joined:
    Jan 28, 2018
    Messages:
    959
    Likes Received:
    582
    Indeed, now you have to put the pc's ip (10.x) in the BI app. If that is not working, you should change the "internal IP" for the OpenVPN in the Synology (which I think is colliding/overlapping with your internal LAN). Can you show us a screenshot of your VPN settings in the Synology please?

    Thanks!
    CC
     
  11. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    That did the trick. Everything is working now. Thanks guys.
     
  12. catcamstar

    catcamstar Getting comfortable

    Joined:
    Jan 28, 2018
    Messages:
    959
    Likes Received:
    582
    Hooray for ourselves! :p
     
  13. Todd Schmidt

    Todd Schmidt Getting the hang of it

    Joined:
    May 17, 2019
    Messages:
    72
    Likes Received:
    27
    Location:
    Massachusetts
    Now, time for more cameras. :headbang: