nested routers, remote access outer

mdberger

Using openvpn on Fedora 16 client and server.
My server 192.168.20.2, is on an inner lan with router 192.168.20.1 .
That router is 192.168.10.2 on an outer lan with router 192.168.10.1 .
The outer router is connected to the wan, and has a registered domain name.
The outer directs 1194 to the inner, and thence to the server.
Now from my server box, 192.168.20.2, I can manage BOTH routers with http.

The server box runs openvpn server, with iptables appropriately set.

Using a Fedora 16 laptop, I connect to the wlan on the outer router.
Then, via the domain name, I connect the laptop openvpn client to the server.
That gives me access to all boxes on the inner router, as well as the inner
router itself.

However, via openvpn I cannot access (ping or http) the outer router. Since I
would presume that the laptop should have the same access as anything else
on the inner lan, this would appear to be a problem.

Perhaps some configuration setting can fix this? If you need additional
information, please ask.

BTW, while on the openvpn, if the laptop connects to another box on the inner lan
with ssh, I can ping the outer router from the other box.

My apologies for a long winded question.
Thanks,
Mike.

maikcat

hi there,

However, via openvpn I cannot access (ping or http) the outer router. Since I
would presume that the laptop should have the same access as anything else
on the inner lan, this would appear to be a problem.

sounds routing problem to me...

does your inner router performs NAT?
if not then outer router must be aware of openvpn subnet...

regards.

Michael.

mdberger

Fixed; added these lines to server.conf :

push "route 192.168.10.1 255.255.255.255"
route 192.168.10.1 255.255.255.255

Thanks,
Mike.