Losing some connectivity on local network at work once I connect to my remote VPN at home (can't IP print)

[Nathaniel Neugent]

I have successfully established a VPN connection from work to my NAS at home.  Tunnelblick has allowed me to do some cool things like mount the NAS drive on my computer, use time machine backup from school, and I'm about to move my iPhoto Library to my NAS so I can free up more space.

However, when I'm connected at work, it somehow blocks my ability to print to my office printer (a Lexmark which I set-up using IP printing).  It also blocks a local intranet but thats not a big deal since I don't use it very often.  But not being able to print while connected is.  Any ideas on how to fix this?  I can post my configuration and logs if that would help.

Thanks,

Nate

[jkbull...gmail.com]

It all depends on your configuration and setup.

OpenVPN is probably set up to use "redirect-gateway def1", which routes all traffic through the VPN. So even through you are on your office LAN, everything goes to your home LAN -- including things that you would like to go to the office LAN.

First, make sure the Tunnelblick "Route all traffic through the VPN" checkbox is not checked. (It's on the "While Connected" tab of the "Advanced" settings page.) That checkbox forces the use of "redirect-gateway".

Then look through your configuration file for a "redirect-gateway" option, and remove it. Then try to connect and examine the log for any mention of "redirect-gateway" -- sometimes it is "pushed" from the OpenVPN server to the OpenVPN client.

[Nathaniel Neugent]

Thanks for the quick help. I thought it might be the "Route all traffic through the VPN", so its unclicked but no change.  What about the one below it "Monitor network settings"?  It is clicked…should I unclick?

Also, I disconnected and it still has "Examine OpenVPN Configuration File…" grayed out.  So I can't find the config file.  Any ideas there?

Nate

[jkbull...gmail.com]

The latest beta version of Tunnelblick should let you examine the configuration file. Get it from the Downloads page.

[Nathaniel Neugent]

Thanks…getting it now.

[Nathaniel Neugent]

I think I did end up finding it using a wiki that told me where to look.  But the Beta did let me "Examine"...here is what it says:

client

dev tun

script-security 3

proto udp

remote  "my server URL" 1194

resolv-retry infinite

nobind

ca ca.crt

auth-user-pass

reneg-sec 0

cipher AES-128-CBC

comp-lzo

On Thursday, November 21, 2013 12:06:45 PM UTC-6, Nathaniel Neugent wrote:

Thanks…getting it now.

[Jonathan K. Bullard]

As I said earlier:

Then try to connect and examine the log for any mention of "redirect-gateway" -- sometimes it is "pushed" from the OpenVPN server to the OpenVPN client.

You will have to talk to the qnap people to resolve this.

On Thu, Nov 21, 2013 at 2:09 PM, Nathaniel Neugent <neu...@gmail.com> wrote:

I think I did end up finding it using a wiki that told me where to look.  But the Beta did let me "Examine"...here is what it says:

client

dev tun

script-security 3

proto udp

remote  NathanielNeugent.myqnapcloud.com  1194

resolv-retry infinite

nobind

ca ca.crt

auth-user-pass

reneg-sec 0

cipher AES-128-CBC

comp-lzo

On Thursday, November 21, 2013 12:06:45 PM UTC-6, Nathaniel Neugent wrote:

Thanks…getting it now.

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at http://groups.google.com/group/tunnelblick-discuss.
For more options, visit https://groups.google.com/groups/opt_out.

[Nathaniel Neugent]

Did that and can't find any mention of either.  I don't understand a lot about how VPN works but I'm not sure how it could be a QNAP problem as it is the Tunnel blocking the printer here at work while the QNAP is at home?  I'm pulling this out of thin air but it could just be that my IP printer set-up needs a port that can poke through the tunnel? I will look on their forums as well.

Thanks,

Nate

[jkbull...gmail.com]

The reason I say to talk to the qnap people is because it is the qnap that is telling OpenVPN (via Tunnelblick) how to set up the VPN. I think it is setting up the VPN to send everything thorough the VPN. So qnap has to set up the VPN a different way.

[jkbull...gmail.com]

The reason I say to talk to the qnap people is because it is the qnap that is telling OpenVPN (via Tunnelblick) how to set up the VPN. I think it is setting up the VPN to send everything thorough the VPN. So qnap has to set up the VPN a different way.

[Nathaniel Neugent]

Ah…ok (hence my lack of VPN understanding).  I will check my QNAP settings for VPN and see what it says.