bwmetcalf
We have several users trying to use the openvpn client on Linux machines behind a Cisco ASA firewall. I'm pretty sure their troubles are due to needing a static route on the firewall, but it's not clear to me why, say, our Mac users with the native client don't require a static route as it's working fine for them. Our Linux users can connect and get an IP address assigned to tun0, but can't pass traffic. Our local network is 192.168.2.0/24 and the let's say the remote VPN endpoint is 1.1.1.1 which hands out addresses in the 192.168.64.0/24 range. Is the static route issue the cause and what should that static route be?
Thanks.
janjust
so mac users using the 'native client' connect directly to the Cisco ASA? if so, check the routing table on a Mac client after it connects; make sure that all routes that are set by the Cisco client are also included in the OpenVPN setup.