Hi,
I think I'm missing something pretty easy. My openvpn server sits on a Centos 6.2 box with 2 other boxes attached in a private ip space subnet.
client -> internet -> openvpn (openvpn subnet: 10.10.2.0/24)
This is fine - any certified client can get an ip in the 10.10.2.0/24 ip subnet and can ping the server.
The server is also part of a subnet in the 10.1.2.0/24 subnet space. There are a couple other boxes on this subnet. The problem is, although the clients can ping the openvpn server itself on the 10.1.2.x subnet, they can't connect to these other boxes. I had thought I only needed this in the server config:
push "route 10.1.2.0 255.255.255.0"
Do I need to set up additional routing on the other attached servers? What am I missing?
The server's config looks like this:
port 1194
proto udp
dev tun
ca certs/keys/ca.crt
cert certs/keys/vpn.foo.com.crt
key certs/keys/vpn.foo.com.key # This file should be kept secret
dh certs/keys/dh1024.pem
server 10.10.2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.1.2.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Thanks in advance -- Drew
