OpenVPN routing

Ryan Coleman ryan.coleman at cwis.biz
Tue Apr 26 02:36:24 UTC 2011


I've got an OpenVPN connection working to my remote server, but I want to route the traffic to the local LAN.

I have a bridge set up, pingable... but can't ping the em1 (192.168.46.2) from the remote machine.

Server.conf:
local 192.168.46.2
port 1194
proto udp
dev tap
ca keys/cacert.pem
cert keys/server.crt
key keys/server.key # This file should be kept secret
dh keys/dh1024.pem
# Don't put this in the keys directory unless user nobody can read it
crl-verify keys/crl.pem
#Make sure this is your tunnel address pool
server 192.168.47.0 255.255.255.0
ifconfig-pool-persist ipp.txt
#This is the route to push to the client, add more if necessary
#push "route 192.168.46.254 255.255.255.0"
push "route 192.168.47.0 255.255.255.0"
push "dhcp-option DNS 192.168.45.10"
keepalive 10 120
cipher BF-CBC #Blowfish encryption
comp-lzo
#fragment
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 6
mute 5


client.conf: 
#Begin client.conf
client
dev tap
proto udp
remote sub.domain.ltd 1194
nobind
user nobody
group nobody
persist-key
persist-tun
#crl-verify
#remote-cert-tls server
ca keys/cacert.pem
cert keys/ryanc.crt
key keys/ryanc.key
cipher BF-CBC
comp-lzo
verb 3
mute 20

Any ideas?  As I said, I can talk to the remote server, but not the local LAN.

To throw a new curveball in the mix, I'd like to talk to 192.168.45.0/24 - which we have another VPN connecting the two networks (not running on a VPN I can do much with).


Thanks,
Ryan


More information about the freebsd-questions mailing list