I have my router on 192.168.0.1 and OpenVPN server enabled on this router.
Other PC/server on my LAN are in the range between 192.168.0.100 -> 200
My OpenVPn works great all conenction get a IP from range
192.168.0.80 -> 90 and they can see all my PC/server/media player that are at my LAN.
So now to my question ;-)
I want the OpenvPN connection from my clients only be allowed to see and have access too following IP
192.168.0.199 thats is my media server. Would this be possble?
EDIT
Here is my OpenVPN Config in DD-WRT router
tls-server
mode server
proto udp
#proto tcp
port 2294
dev tap0
server-bridge 192.168.0.199 255.255.255.0 192.168.0.80 192.168.0.90
# Gateway (VPN Server) Subnetmask Start-IP End-IP
push "route-gateway 192.168.0.254"
#push "redirect-gateway"
status /var/log/openvpn/openvpn-status
log /var/log/openvpn/openvpn.log
log-append /var/log/openvpn/openvpn.log
keepalive 10 120
daemon
verb 5
client-to-client
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
And here is my start up in the router
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
ip neigh change 192.168.0.254 lladdr ff:ff:ff:ff:ff:ff nud permanent dev br0
ip neigh add 192.168.0.254 lladdr ff:ff:ff:ff:ff:ff nud permanent dev br0
and this is my firewall settings in the router
iptables -A INPUT -i tap0 -j ACCEPT
iptables -I INPUT -p udp --dport 1194 -j ACCEPT
And finaly my config for the client
remote my WAN ip address 2294
client
dev tap0
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca "C:\\client3\\ca.crt"
cert "C:\\client3\\client3.crt"
key "C:\\client3\\client3.key"
ns-cert-type server
verb 5
BR
Peter
