VPN via IB4 no longer finds “local” servers

    • Hello everyone,

    I set up the VPN on my Internetbox 4 shortly before the holidays. It worked well too.

    Today at the airport I was able to set up a VPN connection on public WiFi and access my servers in the 192.168.1.x area. But now I have arrived abroad and am setting up an internet connection, which also works. I can also use the Internet with a VPN. https://www.wieistmeineip.ch/ also shows me that I am “in Switzerland”. But I can no longer access my servers.

    A ping on the IP address leads to

    Request timeout for icmp_seq 0

    Request timeout for icmp_seq 1

    ping: sendto: No route to host

    Request timeout for icmp_seq 2

    ping: sendto: Host is down

    Request timeout for icmp_seq 3

    ping: sendto: Host is down

    Request timeout for icmp_seq 4

    C

    Since this can also be accessed via the Internet via its own domain, it shows that the device is up and running.

    Who can help me here?

    Thanks!

    Show original language (German)
    • DomiP likes that.

    • Hi @DocBrown

      Yes, thank you very much for the tip. It works with the iPhone as a hotspot. But of course this requires expensive data volume.

      You may be able to make the data volume cheaper by booking an eSIM from a local provider or, for example, via http://airalo.com.

      Is there a way that I can change something (on the internet box, on the VPN settings on the Mac)? It’s hard for me to reconfigure my friends’ internet access. 😁

      On the software side it will be difficult. You could of course reconfigure the IP range on the IB. But it’s tricky remotely because you can then lose access to a typo on the NAS, for example.

      What would of course also work would be to use a small router that connects to your friend’s WiFi and then places your Mac in a different subnet.

      LG

      r00t

    @DocBrown kind of strange, I would have said that it should work.

    What kind of server is it?

    This often happened to me: some of my servers, which were running virtually on a physical one, were broken down. The server could be reached via ping, but the virtual one could no longer be reached.

    Show original language (German)

    Kærar kveðjur - herzliche Grüsse
    Dominik

    Oh sorry. It was already very late when I wrote the post…

    They are Synology DiskStations and the computer I travel with is a MacBook with Sonoma 14.2 and I use the integrated VPN function (no extra programs like Tunnelblick or similar)

    Show original language (German)

    Hi @DocBrown

    What is the local subnet in the hotel/house/tent or wherever you are? Or do you access the Internet via mobile phone hotspot?

    If it is also 192.168.1.0/24, your device is probably trying to reach the server on the wrong interface.

    LG

    r00t

    Show original language (German)

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21

    UPDATE:

    I’m in a private household now. If I now turn on the VPN and then type 192.168.1.1, then I get to the resident’s router and with 192.168.1.x I reach his DiskStation, not mine.

    Show original language (German)

    @DocBrown wrote:

    UPDATE:

    I’m in a private household now. If I now turn on the VPN and then type 192.168.1.1, then I get to the resident’s router and with 192.168.1.x I reach his DiskStation, not mine.

    This became the thesis

    If it is also 192.168.1.0/24, your device is probably trying to reach the server on the wrong interface.

    aka subnet conflict proven 😉. However, you won’t like the solution. This is: Do not use 192.168.1.0/24 on one page…

    LG

    r00t

    Show original language (German)

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21

    Yes, thank you very much for the tip. It works with the iPhone as a hotspot. But of course this requires expensive data volume.

    Is there a way that I can change something (on the internet box, on the VPN settings on the Mac)? It’s hard for me to reconfigure my friends’ internet access. 😁

    Show original language (German)

    Hi @DocBrown

    Yes, thank you very much for the tip. It works with the iPhone as a hotspot. But of course this requires expensive data volume.

    You may be able to make the data volume cheaper by booking an eSIM from a local provider or, for example, via http://airalo.com.

    Is there a way that I can change something (on the internet box, on the VPN settings on the Mac)? It’s hard for me to reconfigure my friends’ internet access. 😁

    On the software side it will be difficult. You could of course reconfigure the IP range on the IB. But it’s tricky remotely because you can then lose access to a typo on the NAS, for example.

    What would of course also work would be to use a small router that connects to your friend’s WiFi and then places your Mac in a different subnet.

    LG

    r00t

    Show original language (German)

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21

    @r00t wrote:

    On the software side it will be difficult. You could of course reconfigure the IP range on the IB. But it’s tricky remotely because you can then lose access to a typo on the NAS, for example.

    I don’t want to reconfigure my personal network at all. I have too many devices for that (including smart home) 😀

    I’m glad it works.

    And even if:

    I never know how the guest network is configured. If I change my network to the 10 range and I get into a network with a 10 range, I’ll face the same problem, right?

    Such a mini router might be an option. Since the 192 network is usually the standard in private households. Could you recommend a device?

    Show original language (German)

    Hi @DocBrown

    And even if:

    I never know how the guest network is configured. If I change my network to the 10 range and I get into a network with a 10 range, I’ll face the same problem, right?

    In 10.0.0.0/8 there is enough space for 224−8 i.e. 65,536 /24 subnets.

    If you take a more exotic subnet, the chance of encountering the same thing is pretty slim. Personally, I have never found my subnet anywhere outside of my apartment 😉. If you are primarily in private households, in most cases you will not find a private subnet in this range, but rather a network in the 192.168.0.0/16 range.

    By the way, this is a problem that does not occur with IPv6, since in most cases you don’t need any “private” networks - at least not like those found today (with NAT).

    Such a mini router might be an option. Since the 192 network is usually the standard in private households. Could you recommend a device?

    Personally, I use a GL-iNet AX3000

    The “double-NAT” solution is of course a bit ugly 😉

    LG

    r00t

    Show original language (German)

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21

    @DocBrown

    If you work a lot with VPN servers in your home network, it is always a bad idea to use a default IP range at home.

    If you had your home network e.g. B. configured to 192.168.13.0/24, you would probably already be 99.9% spared from the current problem 🙂

    The idea with the additional travel router works, but it requires you to have access to a LAN port on the external network, which is far from always possible.

    The Nano Router from TP Link has proven to be a jack of all trades for such specials:

    [https://www.digitec.ch/de/s1/product/tp-link-tl-wr802n-router-5615380](https://www.digitec.ch/de/s1/product/tp-link- tl-wr802n-router-5615380)

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

    Hi @Werner

    but requires that you have access to a LAN port on the external network

    I don’t know whether the TP-Link can do that too, at least the GL-Inet box can also connect to an existing WLAN (see [“Repeater”/STA](https://docs.gl-inet.com/router /en/4/interface_guide/internet_repeater/)). No cable needed 😉

    IMO, the “correct” solution is still re-addressing the home network.

    LG

    r00t

    Show original language (German)

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21

    @r00t

    It’s a bit outdated now, but because the TP Link Nano Router is super small and really suitable for traveling, a few more words about it:

    - knows all conceivable operating modes

    - can be powered not only via a power supply, but also via any USB interface (e.g. directly from a notebook or from a USB interface on a main router).

    But if you want to operate your own network with an IP range that differs from the Internet access router, you need the router mode including the DHCP server and then I can’t spontaneously think of a solution like setting up your own network in the media operating mode. Bridge or WLAN repeater should work.

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

    Tailscale is free, I have configured all PCs, my smartphone, my tablet and my 2 Synologies with Tailscale. That’s ALWAYS the case, no matter what address you have…

    I have yet to get my hands on a usable and scalable VPN solution that NOT works with routing table bending.

    https://de.wikipedia.org/wiki/Routingtable

    Practically all VPN solutions create a “virtual network card” that swallows or delivers all data packets that travel through the VPN tunnel.

    On Windows with:

    # route -4 print

    Check the routing table when the VPN tunnel is active.

    Show original language (German)
    a month later

    @DocBrown wrote:

    @r00t wrote:

    On the software side it will be difficult. You could of course reconfigure the IP range on the IB. But it’s tricky remotely because you can then lose access to a typo on the NAS, for example.

    I don’t want to reconfigure my personal network at all. I have too many devices for that (including smart home) 😀 I’m glad that it works.

    But maybe there is an easier way and a lot of things can be done via DHCP. So I would now like to ask the question, how could I change the IP range quickly and easily on the IB4? So that I don’t have as little impact on my network as possible. Thanks!

    Show original language (German)

    Hi @DocBrown

    But maybe there is an easier way and a lot of things can be done via DHCP. So I would now like to ask the question, how could I change the IP range quickly and easily on the IB4? So that I don’t have as little impact on my network as possible. Thanks!

    Here adjust the “local IP address”. You will inevitably have an impact 😉. The easiest way is to restart the IB and any switches + WLAN boxes, then each device has to get a new lease.

    If everything goes wrong - simply reset or reset IB.

    LG

    r00t

    Show original language (German)

    4b 65 69 6e 65 20 4d 61 63 68 74 20 64 65 72 20 6c 65 67 61 63 79 20 49 50 21