Hey all, I've read the forums on how to set this up, however even with commenting out redirect-gateway, and adding the route pushes to my server.config. Client's are still not able to split tunnel to their own resources, or internet connection. See my issue posted here.
http://serverfault.com/questions/438229/openvpn-enable-split-tunneling-client-to-overload-over-their-own-internet-conne
My server.conf:
port 1194
proto udp
dev tun
server 10.0.0.0 255.255.255.0
push "route 172.16.0.0 255.255.255.0 vpn_gateway"
push "dhcp-option DNS 172.16.0.3" #VPN dns server
;push "redirect-gateway def1 bypass-dhcp" #commented out from default config file
[other items omitted, such as log and cert stuff]
clients are getting this route added to their route table
0.0.0.0 10.0.0.10 255.255.255.0 #which i know is telling all 0.0.0.0 traffic to go to the VPN server errrrr
Here is the server logs SENT Control statmeent:
SENT CONTROL [jim]: 'PUSH_REPLY,route 172.16.0.0 255.255.255.0 vpn_gateway,,dhcp-option DNS 172.16.0.3,route 10.0.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.0.0.22 10.0.0.21' (status=1)
I also have a lot of these statmeents:
jim/70.192.x.x:8460 MULTI: bad source address from client [192.168.3.103], packet dropped
I'm guessin 70.192.x.x is the internet connection of the client, and 192.168.3.103 is there private IP on the client's local network.
Everything else looks good in the logs, and I am able to ping 172.16.0.3 from the client when VPN is running. So the routing is working.
Thank you for you help
-Jim
