Hello, I've been messing with openVPN for basically the past week and it actually works but there's a few hiccups that I think may be due to my lack of knowledge coming through in my configurations or perhaps it's just a problem with Macs.
We run an intranet which is vital for our internal services, and has use outside for management who wants to be able to access it from outside without exposing it to the internet, as well as access to our PBX. So a VPN was the plan, we use an openVPN version of a dd-wrt router (v24sp2). I able to able to successfully connect to this VPN with Linux based systems and see the other computers (via ping or IP) but I can't ping the main router. This isn't important for me to be able to do, but I wasn't sure if that was indicative of anything else. We also want to make sure that the VPN is on separate IP addresses for limiting access to the Intranet and to our PBX.
But when I try to connect with a Macs I am not able to see any of the other computers, I can connect but access the other computers on the VPN.
If I'm setting this up entirely wrong, or if it is just maybe something on the Macs (Firewalls are disabled) any comments on my configuration are appreciated because this is really out of my general knowledge base.
Server.conf
push "route 10.8.54.0 255.255.255.0"
push "route 10.8.10.0 255.255.255.0"
server 10.8.10.0 255.255.255.0
client-config-dir /tmp/openvpn/ccd
dev tap
proto udp
keepalive 10 120
daemon
verb 5
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl
# management parameter allows DD-WRT\s OpenVPN Status web page to access the server\s management port
# port must be 5001 for scripts embedded in firmware to work
management localhost 5001
Firewall commands on the router
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.10.0/24 -j ACCEPT
iptables -A INPUT -i tap0 -j ACCEPT
iptables -A INPUT -i br0 -j ACCEPT
iptables -A FORWARD -i br0 -j ACCEPT
Client.conf
remote 192.168.100.100 1194
client
remote-cert-tls server
dev tap
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
float
#If the pushed routes appear not to be added on windows hosts, add the following:
#route-delay 30
ca ---------
cert -----
key --------
