Hi,
I've installed OpenVPN on a freshly installed FreeBSD 9.1 box. I can connect to the VPN using certificate authentication, and I get an IP address, but I don't think I'm understanding the network configuration portion correctly.
Basically, we want to use OpenVPN as a remote-IP-granting service. That is, when clients connect to our VPN, they will get a public IP address on our network.
For the purposes of this example, the "public" IP network is 1.2.3.0/24.
Our router is 1.2.3.1
There is some other network gear at 1.2.3.2 and 1.2.3.3
The OpenVPN server is 1.2.3.4
Clients should receive addresses from 1.2.3.20 through 1.2.3.99
I tried using:
server 1.2.3.4 255.255.255.0
But OpenVPN told me that the netmask was invalid and refused to start. If I use:
server 1.2.3.0 255.255.255.0
OpenVPN starts, but I'm concerned that it's going to take over the whole class C, rather than allowing the other networking gear to co-exist. Is there any way to get this to work without using a bridged connection (which appears to not work in the Android client)?
Also, we want this VPN server configured in full-tunnel mode, so I've got:
push "redirect-gateway"
But, once connected, my clients lose all Internet connection. So, I'm assuming I need to configure something else on the FreeBSD box to get routing to work properly. Is that correct?
