OpenVPN client can only reach server but cannot access other devices on lan

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
siteon
OpenVpn Newbie
Posts: 1
Joined: Tue Apr 25, 2017 6:31 pm

OpenVPN client can only reach server but cannot access other devices on lan

Post by siteon » Tue Apr 25, 2017 6:37 pm

OpenVPN can only reach server not network devices.

OpenVPN - CentOS 7 Server <-> Mac OS X

Through the OpenVPN I would like to access all devices (e.g. PC1 192.168.4.51) in the subnet 192.168.4.0/24 on the server side from my Mac.

The network setup looks like:

Code: Select all

   
       +----------------------+
       | [  OpenVPN Server  ] |
   tap0|  openvpn.domain.com  |eth0
       |       CentOS7        |192.168.4.1             eth0
       +-----------+----------+                    192.168.4.51
       y.y.y.y:1194|br0                         +------------+  
                   |            +---------------+    PC 1    +
      192.168.4.254|            |               +------------+ 
                   +------+-----+
-------------------|   Router   |---------------------
                   +------+-----+
                          |213.123.213.123:1194 (ISP)
          +---------------+--------------+    Internet
          |                              |
----------+------------------------------+------------
          |     +------------------+     |
          | tap0|                  |eth0 |
          +-----+    VPN Client    +-----+
     192.168.4.x|                  |192.168.1.101
                +------------------+ 
I tried several configurations tun/tap and server / server-bridge, but I seem to be missing something.

The VPN connection start and gives no errors. But with the tried configs I could reach at the most to 192.168.4.1 (Server IP).

What would be the best way to set this up? Tun or Tap server / server-bridge, etc. ?
What iptables settings should be configured?

Thanks in advance.

Post Reply