I
I
Ivan2016-12-14 11:28:03
openvpn
Ivan, 2016-12-14 11:28:03

What is wrong with the OpenVPN setup. no access to the client's network?

The topic has already been raised more than once.
Essence OpenVPN server centos 6.8 client Paspberry pi
Server<-------------------->|client<---------------- ------>|client network
ip:123.45.67.89(white) *** ip:192.168.44.78(NAT) ********ip:192.168.1.0/24
vpn:10.10.1.1 * **************** vpn:10.10.1.2
how to get access from the server from the client's network with such configs?
server config

port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
tls-auth ta.key 0
topology subnet
server 10.10.1.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 127.0.0.1"
keepalive 10 120
cipher AES-128-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem

client config
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote MYIP 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-128-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
XXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
  XXXXXXXXXXXXXX
-----BEGIN CERTIFICATE-----
XXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
XXXXXXXXXXXXXXXXXXXXX
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
XXXXXXXXXXXXXXXXXXX
-----END OpenVPN Static key V1-----
</tls-auth>

the server added a route to the client network
route add -net 192.168.1.0/24 gw 10.10.1.2
result is null

Answer the question

In order to leave comments, you need to log in

2 answer(s)
I
Ivan, 2016-12-16
@bordakovskiy

Problem solved. added a line in this folder to the
server.conf config .

vim /etc/openvpn/ccd/rpi
iroute 192.168.1.0 255.255.255.0

D
Dmitry, 2016-12-14
@Tabletko

Is traffic routing enabled on the client? What are the firewall rules?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question