OpenVpn Freebsd server + Windows 7 clients

rmerk

Hello!
I'm trying to set up OpenVpn. Server-side Freebsd, clients (over 150) Windows 7 Home Basic
All clients need access to my local network 172.16.1.0/24. So i installed Openvpn 2.2.1_1 with unmarked pw_safe and pkcs11 options, config is:
local a.b.c.d
port 1194
proto udp
dev tun5
management localhost 8329
ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/server.crt
key /usr/local/etc/openvpn/keys/server.key
dh /usr/local/etc/openvpn/keys/dh2048.pem
crl-verify /usr/local/etc/openvpn/crl.pem
server 172.16.166.0 255.255.255.0
push "route 172.16.1.0 255.255.255.0"
client-config-dir ccd
route 172.16.166.0 255.255.255.0
push "redirect-gateway def1"
client-to-client
tls-server
tls-auth keys/ta.key 0
tls-timeout 120
auth SHA1
cipher BF-CBC
keepalive 10 120
comp-lzo
max-clients 200
user nobody
group nobody
mssfix 1450
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 3
mute 20

client config in ccd folder:
ifconfig-push 172.16.166.250 172.16.166.249

All starting without eny error. Windows client installed normaly too, client config:
dev tun
proto udp
remote a.b.c.d
port 1194
client
resolv-retry infinite
pkcs12 "C:\\Program Files (x86)\\OpenVPN\\config\\rus.p12"
tls-client
tls-auth ta.key 1
auth SHA1
cipher BF-CBC
ns-cert-type server
comp-lzo
persist-key
persist-tun
verb 3

So seems like connection is passed normally, but i can't reach 172.16.1.0/24 network. Looking at both side routing tables:
default isp_gateway UGS 0 155918 tun0
isp_gateway link#12 UHS 0 19 tun0
a.b.c.d link#12 UHS 0 2 lo0
127.0.0.1 link#11 UH 0 404 lo0
172.16.1.0/24 link#1 U 0 59802 re0
172.16.1.5 link#1 UHS 0 0 lo0
172.16.166.0/24 172.16.166.2 UGS 0 1838 tun5
172.16.166.1 link#13 UHS 0 0 lo0
172.16.166.2 link#13 UH 0 0 tun5

Windows:
0.0.0.0 0.0.0.0 172.16.1.3 172.16.166.250 31
0.0.0.0 0.0.0.0 172.16.1.5 172.16.1.166 276
0.0.0.0 128.0.0.0 172.16.166.249 172.16.166.250 30
89.209.109.242 255.255.255.255 172.16.1.5 172.16.1.166 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
128.0.0.0 128.0.0.0 172.16.166.249 172.16.166.250 30
172.16.1.0 255.255.255.0 On-link 172.16.1.166 276
172.16.1.0 255.255.255.0 172.16.166.249 172.16.166.250 30
172.16.1.166 255.255.255.255 On-link 172.16.1.166 276
172.16.1.255 255.255.255.255 On-link 172.16.1.166 276
172.16.166.0 255.255.255.0 172.16.166.249 172.16.166.250 30
172.16.166.248 255.255.255.252 On-link 172.16.166.250 286
172.16.166.250 255.255.255.255 On-link 172.16.166.250 286
172.16.166.251 255.255.255.255 On-link 172.16.166.250 286
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 172.16.166.250 286
224.0.0.0 240.0.0.0 On-link 172.16.1.166 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 172.16.166.250 286
255.255.255.255 255.255.255.255 On-link 172.16.1.166 276

Client can see server, but server don't. Client acquire wrong default gateway. 172.16.1.3 is windows 2003 server that providing now vpn via Kerio, and it must be changed with OpenVpn on Freebsd. Where am i wrong tell please.
Sorry for my english.
Thanks.

Mimiko

I don't see how 172.16.1.0/255.255.255.0 were pushed to clients to be set in routing table. Server confi does not contain a pushing rule.

As I undestan, FreeBSD is not 172.16.1.0/24 lan default gateway, so read: https://forums.openvpn.net/topic9465.html