Posible OVPN over 2 networks same range?

pepitovadecurt

Hi I need to do similar this image:

The OVPN server is in Ubuntu Server and it is created with Webmin module.
Here is the client file:

client
proto udp
dev tun
ca ca.crt
dh dh2048.pem
cert mycert.crt
key mycert.key
remote test.no-ip.org 1194
cipher AES-256-CBC
verb 2
mute 20
keepalive 10 120
comp-lzo
persist-key
persist-tun
float
resolv-retry infinite
nobind

push "route add 192.168.1.0 mask 255.255.255.0 192.168.3.1"
push "redirect-gateway local def1"
#route-method exe
#route-delay 2

auth-nocache

And here is the server config:

port 1194«
proto udp«
dev tun0«
ca keys/my/ca.crt«
cert keys/my/jbrs-ubuntu.crt«
key keys/my/jbrs-ubuntu.key«
dh keys/my/dh2048.pem«
server 192.168.3.0 255.255.255.0«
crl-verify keys/jbrs/crl.pem«
cipher AES-256-CBC«
user nobody«
group nogroup«
status servers/MY_OVPN/logs/openvpn-status.log«
log-append servers/MY_OVPN/logs/openvpn.log«
verb 2«
mute 20«
max-clients 100«
local 192.168.1.204«
keepalive 10 120«
client-config-dir /etc/openvpn/servers/JBRS_OVPN/ccd«
comp-lzo«
persist-key«
persist-tun«
ccd-exclusive«

With Windows XP client can connect, can ping at 192.168.3.1, but can't ping the IPs that are in the OVPN server LAN.
I supose that the problem are in the routes but believe that are correct.
Tested in W7 and the same problem.

maikcat

first remove these from your client config

push "route add 192.168.1.0 mask 255.255.255.0 192.168.3.1"
push "redirect-gateway local def1"

add this to your server config

push "route 192.168.1.0 255.255.255.0"

if you use 192.168.1.0 locally you WILL have problems...
routing problem to be more precise,not openvpns
you can use NAT though on server..

Michael.

pepitovadecurt

Hi Maikcat, I change the config according your instructions.
I've tested to connect with a computer from other range "176.80.48.xxx" but cannot ping.
With windows command "route print" not appears the route 192.168.1.0, and no error in the client log.

maikcat

please post the logs from client with problem..

Michael.

santjago

I've a similar problem. Say, in terms of this thread, my tunneled through OpenVPN network is 192.168.1/24. My client is in a hotel with their network also set as 192.168.1/24. Client's notebook default gateway is set, say, to 192.168.1.1. After

push "route 192.168.1.0 255.255.255.0"

is applied client's notebook is totally isolated of Internet connection over which OpenVPN tunnel is built. Is there some config trick to preserve client's default gateway to the network destination it was before OpenVPN routes are pushed in and applied? Something that would invoke

route add 192.168.1.1 mask 255.255.255.255 192.168.1.167

where 192.168.1.1 - hotel's router address, 192.168.1.167 - client notebook's address in hotel's network (command given as Windows syntax). In my case that's the situation where only 192.168.1/24 should be tunneled through OpenVPN without access to 0/0 through tunnel.

janjust

you can try adding

push "route 192.168.1.1 255.255.255.255 net_gateway"

(or add it to the client config without the push) but it's often better to choose a less-used IP range for your VPN, e.g. 172.22.23.0/24

santjago

janjust wroteyou can try adding

push "route 192.168.1.1 255.255.255.255 net_gateway"

(or add it to the client config without the push) but it's often better to choose a less-used IP range for your VPN, e.g. 172.22.23.0/24

I'd love my CEO not to guess what route with what params with what config do he run to connect. I'd love OpenVPN guess those "push ${params}" itself based on current client's network config. Anyway, I've created a bug report: https://community.openvpn.net/openvpn/ticket/282 that could be coded-in to solve some rare but unavoidable problems.

Blisk

I have the same problem, can not ping local network and openvpn server is paralell with gateway