Hi all,
I have had a working tap vpn setup for a while now. I now would like one of my clients, which is a router to share it's entire network, and have the two subnets able to talk to each other. This image explains the setup:
http://banger.doesntexist.com/vpnsetup.png
DD-WRT Router 2 connects to Ubuntu OpenVPN server via the internet. I wish to have all devices on 24.x and 25.x subnets talking with each other over the vpn. I do also require VPN clients to be able to see all PC's on 25.x, I don't care if they can not see the 24.x subnet.
At the moment my VPN server is working fine and DD-WRT Router 2 is connecting in fine, I just don't have routing setup properly (I am assuming). When VPN clients connect, they get assigned a part of the 25.x subnet that is not given out by DD-WRT Router 1. I have setup a route on DD-WRT Router 1 to route all 24.x traffic to the VPN server and then setup a route on the VPN server to push it to 25.54, the IP that DD-WRT Router 2 gets, however this is not working. I have tried various other similar routes, however nothing has been successful. To add to the confusion, devices from 24.x are sometimes being assigned addresses on 25.x and vice versa, which I do not want to happen. Devices connected to either router should be just getting IP's from that particular router, and not the other.
I am thinking that this is a bit of a mess atm, so any help would be greatly appreciated. I have attached my server.conf below.
port 1194
proto udp
dev tap
up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.25.140 255.255.255.0 192.168.25.50 192.168.25.60
push "route 192.168.25.0 255.255.255.0"
client-to-client
keepalive 10 120
tls-auth ta.key 0
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
log openvpn.log
verb 3
