Hellow. recently installed my first openvpn server. I need to do that all clients have the same default gateway through the VPN. To facilitate / unify the routing on clients This is the configuration of my server [code]port 1194 proto udp dev tun #---- Seccion de llaves ----- ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt cert /etc/openvpn/easy-rsa/2.0/keys/server.crt key /etc/openvpn/easy-rsa/2.0/keys/server.key dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem #--------- Seccion para autenticar usuario --------------# plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login username-as-common-name #---------------------------- server 172.16.0.0 255.255.255.0 push "redirect-gateway" ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status-servidorvpn-udp-1194.log verb 3[/code] This is the configuration of my client's [code]client dev tun proto udp remote 10.1.1.186 1194 float resolv-retry infinite nobind persist-key persist-tun #------ SECCION DE LLAVES -------- ca ca.crt cert cliente1.crt key cliente1.key ns-cert-type server #--------------------------------- # sin este parametro el usuario y passw se piden al final. auth-user-pass comp-lzo verb 3[/code] and so is the state of the network after vpn connect with client1 [code]Adaptador Ethernet Conexión de área local 5 : Sufijo de conexión específica DNS : Descripción. . . . . . . . . . . : TAP-Win32 Adapter V9 Dirección física. . . . . . . . . : 00-FF-B5-06-F7-0A DHCP habilitado. . . . . . . . . : No Autoconfiguración habilitada. . . : Sí Dirección IP. . . . . . . . . . . : 172.16.0.10 Máscara de subred . . . . . . . . : 255.255.255.252 ----->Puerta de enlace predeterminada : 172.16.0.9 Puerta de enlace predeterminada : 172.16.0.5

if you do not want to redirect all traffic you can also push routes for specific subnets from the server: [code]push "route a.b.c.d netmask" push "route w.x.y.z netmask[/code] etc ; the openvpn server/client will automagically fill in the vpn gateway

fix the same "default gateway" for all customers.

lucasl

Hellow.
recently installed my first openvpn server.
I need to do that all clients have the same default gateway through the VPN. To facilitate / unify the routing on clients
This is the configuration of my server

port 1194
proto udp
dev tun
#---- Seccion de llaves -----
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
#--------- Seccion para autenticar usuario  --------------#
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
username-as-common-name
#----------------------------
server 172.16.0.0 255.255.255.0
push "redirect-gateway"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status-servidorvpn-udp-1194.log
verb 3

This is the configuration of my client's

client
dev tun
proto udp
remote 10.1.1.186 1194
float
resolv-retry infinite
nobind
persist-key
persist-tun
#------ SECCION DE LLAVES --------
ca ca.crt
cert cliente1.crt
key cliente1.key
ns-cert-type server
#---------------------------------
# sin este parametro el usuario y passw se piden al final.
auth-user-pass
comp-lzo
verb 3

and so is the state of the network after vpn connect with client1

Adaptador Ethernet Conexión de área local 5          :

        Sufijo de conexión específica DNS :
        Descripción. . . . . . . . . . .  : TAP-Win32 Adapter V9
        Dirección física. . . . . . . . . : 00-FF-B5-06-F7-0A
        DHCP habilitado. . . . . . . . .  : No
        Autoconfiguración habilitada. . . : Sí
        Dirección IP. . . . . . . . . . . : 172.16.0.10
        Máscara de subred . . . . . . . . : 255.255.255.252
----->Puerta de enlace predeterminada   : 172.16.0.9       <----------------------------
        Servidor DHCP . . . . . . . . . . : 172.16.0.9

..and so is the state of the network after vpn connect with client2

Adaptador Ethernet Conexion de Area local 3          :

        Sufijo de conexion especifica DNS :
        Descripcion. . . . . . . . . . .  : TAP-Win32 Adapter V9
        Direccion fisica. . . . . . . . . : 00-FF-7C-25-59-5D
        DHCP habilitado. . . . . . . . .  : No
        Autoconfiguracion habilitada. . . : Si
        Direccion IP. . . . . . . . . . . : 172.16.0.6
        Mascara de subred . . . . . . . . : 255.255.255.252
----->Puerta de enlace predeterminada   : 172.16.0.5    <----------------------------
        Servidor DHCP . . . . . . . . . . : 172.16.0.5

As you can see the default gateway for each client is different.
What should I do for all guests to the same default gateway?
thank.

janjust

in the default 'net30' mode, OpenVPN sets up /30 networks for each client. This means the first client is assigned IP 172.16.0.6 with the virtual remote endpoint 172.16.0.5 ; the second client is assigned 172.16.0.10, remote endpoint 172.16.0.9 etc. The default GW for both clients actually is 172.16.0.1 (you can't ping the virtual remote endpoint).

If you really must have the same IP for all clients then switch to 'topology subnet' mode by adding

topology subnet

to the server config. The first client is now assigned 172.16.0.2, the second 172.16.0.3 etc but the default GW should be 172.16.0.1 in both cases.

lucasl

Thank you. janjust !!
It was just what I needed.
I just want that some things are sent by the VPN. Not all traffic.
In this way each customer SETTING routing the same rule.
Now I will try.
The other way, should set a different route on each client. I could not add 172.16.0.1 as a default gateway.
Regards.

janjust

if you do not want to redirect all traffic you can also push routes for specific subnets from the server:

push "route a.b.c.d netmask"
push "route w.x.y.z netmask

etc ; the openvpn server/client will automagically fill in the vpn gateway

lucasl

thank you very much for your help.