Multiple subnets with toplogy subnet

avis

Hey guys, I've been poring over docs, forum posts etc but I can't seem to figure this out.
Basically the network structure I'm looking for is to have the server on one VPN subnet with its non-static pool of clients,
and then have different properties each assigned their own subnet. Example:

VPN server: 10.50.0.1, with pool 10.50.0.0
Property 20: 10.51.20.0 subnet (clients would get 10.51.20.1, etc)
Property 22: 10.51.22.0 subnet (clients would get 10.51.22.1, etc)

If I just have clients connect and get their IPs from the pool, everything works fine.
If I push an IP of 10.51.20.1 down to a client, Openvpn connects fine but the client and server can't see each other at all (pings fail etc)
I'm pretty certain it has to do with how my routes are setup but I'm having a really hard time understanding how they should be defined.

Relevant server conf entries:

server 10.50.0.0 255.255.255.0
topology subnet
client-to-client
route 10.51.20.0 255.255.255.0

Client conf (ccd):

ifconfig-push 10.51.20.1 255.255.255.0

Any suggestions or pointers to similar examples? Thanks.

maikcat

hi there,

keep in mind that you need to push ips from the vpn subnet,not outside of it.

Michael.

avis

So if I want to have 10.50 and 10.51, I'd have to set the server to 10.0.0.0 255.0.0.0?
I guess I won't worry about that now as the network may never even grow that big.

In general though I should only have to push the routes as I am now for just server to client connectivity right?

maikcat

So if I want to have 10.50 and 10.51, I'd have to set the server to 10.0.0.0 255.0.0.0?

yeap

In general though I should only have to push the routes as I am now for just server to client connectivity right?

i dont quite understand what exactly you say.. :?

you push the routes to your clients so that clients can have access to your internal network
(behind the openvpn server).

regards.

Michael

avis

Hmm, still can't seem to get this to work. I tried using 10.0.0.0 255.0.0.0 for the server setting but openvpn complains that's too many address' which is fair enough, so I've given up on that.

All I really want to do is have multiple VPN subnets be able to communicate with the server. Right now I can get them to connect to openvpn fine but no traffic is being routed.

I have the server set to 10.50.0.0 255.255.0.0
and another machine set to 10.50.20.1

The client machine connects fine but I can't ping the server and the server can't ping the client. Any ideas for what I'm doing wrong?

npreiser

did you ever get this to work?,

I am having a similar issue, but with static addresses.
I am trying to setup access control accross the vpn subnets, so that some clients only have access to the server,
but some have access to everything.