Hi all
I have OpenVPN running on a VPS with a public IP. At home, I have a server that runs behind my firewall/router that is the OpenVPN client.
This server is able to communicate down the tunnel with the VPS quite happily. It also performs IP forwarding and masquerades it tun interface so that other computers on the network can talk to the VPN network with a suitable route entry. This all works nicely!
However, I would like the VPS to be able to talk back to my network down the tunnel.
server.conf:
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/ezra.chriscowley.me.uk.crt
key /etc/openvpn/easy-rsa/2.0/keys/ezra.chriscowley.me.uk.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route 192.168.1.0 255.255.255.0
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
I also have /etc/openvpn/ccd/matthew.chriscowley.me.uk:
route 192.168.1.0 255.255.255.0
From my understanding of the comments in the sample server.conf this should now be working. Am I missing something - do I need to add some routes and masquerading at the client end?