Can't establish a router to router VPN with DD-wrt

ccampbell15
ccampbell15 used Ask the Experts™
on
Hi,

I’m trying to setup a router to router connection between 2 different towns.  From what I can see (don’t trust me here) I have the 2 routers setup but can’t figure out how to start the connection. There are 2 towns; Wimberley and Blanco.  The objective is to establish an always on connection between the two locations. Both locations are using DD-wrt but not open-vpn.

Wimberley:  10.10.1.x
Dynamic DNS centraltexasbackup.net (I also used the current IP for this test case, no difference)
Router
      Buffalo WZR-HP-G300NH
      DD-WRT v24-sp2 (08/07/10) std - build 14896
      DHCP Server enabled
                   10.10.1.1 – This is the actual Gateway
      PPTP VPN enabled and it’s working fine as a VPN server
Advanced routing
Mode –                               Gateway
Route name            blanco.no-ip.biz  (tried the current IP as well)
Metric                  0
Destination LAN NET                        192.168.1.0
Subnet      mask                         255.255.255.0
Gateway                              192.168.1.1
      PPTP
            Server IP            10.10.1.1
            Client IP’s            10.10.1.20-30
            Chap            username * whatever *
            PPTP client       disabled


Routing table169.254.0.0
Destination LAN NET      Subnet Mask      Gateway      Interface
66.68.168.1      255.255.255.255      0.0.0.0      WAN
10.10.1.0      255.255.255.0      0.0.0.0      LAN & WLAN
66.68.168.0      255.255.248.0      0.0.0.0      WAN
      255.255.0.0      0.0.0.0      LAN & WLAN
0.0.0.0      0.0.0.0      66.68.168.1      WAN


 

Blanco:  192.168.1.xDynamic DNS blanco.no-ip.biz (used current IP as well)
Router
      Netgear WNR3500v2/U/L
      DD-WRT v24-sp2 (12/16/11) vpnkong - build 18010M
      DHCP Server disabled
10.10.1.1 – This is NOT the actual Gateway. Gateway is 192.168.1.254
      Advanced routing
            Mode                  Router
            Route name            centraltexasbackup.net
                                      Destination LAN NET                          10.10.1.0
                                       Subnet mask            255.255.255.0
                                       Gateway                               10.10.1.1
      PPTP
                                       PPTP server            disabled
                                       PPTP client             enabled
                                       Server IP                               centraltexasbackup.net
                                       Remote subnet            10.10.1.0
                                       Subnet mask            255.255.255
                                       Username            vpn username on Wimberley VPN server
                                       Pass                  * the password *


Routing table

192.168.1.254            255.255.255.255      0.0.0.0            WAN
192.168.1.0            255.255.255.0            0.0.0.0            LAN & WLAN
192.168.1.0            255.255.255.0            0.0.0.0            WAN
169.254.0.0            255.255.0.0            0.0.0.0            LAN & WLAN
0.0.0.0                  0.0.0.0                  192.168.1.254      WAN
0.0.0.0                  0.0.0.0                  192.168.1.254      LAN & WLAN
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2017

Commented:
Your setup will only allow one directional communication, this is not a site to site VPN.
Those where the pptp client is enabled will be able to access the remote side.
To mimic site to site, you would need to have each initiate a tunnel to the other.

Author

Commented:
Seems like I'm missing something.  I used http://www.dd-wrt.com/wiki/index.php/Point-to-Point_PPTP_Tunneling_with_two_DD-WRT as a guide.

It appears that in order to connect to the router in Wimberley the one in Blanco needs to see a VPN server in Wimberley.  I'm not sure how to do that since I think I need the VPN server running in the Wimberley router and it does not appear that both the VPN client and server can't be enabled at the same time.

If I understand what you are saying I should be able to ping a server/workstation in Wimberley (10.10.1.x) from Blanco (192.168.1.x)?  I cannot. The routing table above shows it getting a 169 IP.

Attached is a screen dump of the PPTP client setup from the Blanco side.
Ideas?

Author

Commented:
Oh,

Just noticed something a bit Odd.  From the Blanco server I can ping the router in Wimberley (10.10.1.1) but can't ping anything else eg 10.10.1.13.
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Distinguished Expert 2017
Commented:
You should configure the pptp server ip something other than the LAN side. You also seem to pick an ip outside the LAN.
http://www.dd-wrt.com/wiki/index.php/PPTP_Server_Configuration

Author

Commented:
Hi,

I don't undersand your comment.  The link you sent seems to have a bit of an argument over the IP address of the PPTP server.  I have tried putting  10.10.1.1,  10.10.1.2, 192.168.1.1 into Server IP on the VPN page of services in the router that acts as VPN server (Wimberley) but still can only ping the router (10.10.1.1) from Blanco.  Blanco subnet is 192.168.1.x
Distinguished Expert 2017

Commented:
What is the LAN ip range where the pptp server is enabled?
Make sure the LAN segments in use at each location is unique.
Does the router have a public ip on the wan side?

Author

Commented:
Sorry for the delay.  It turns out that Verizon is the problem here.  They just have junk gear and they even tell you that when you get tech support on the phone.  Don't know much about 2wire but have not heard much good about it.

TY for the help

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial