Hello,
I'm trying to route 2 subnets, from 2 clients. One client has a local subnet, the other is external. On the local side, I can only ping the local ip of the client that connects to the openvpn server, and it is _very_ slow.
I've tried adding this rule: on server, but still nothing:
iptables -t nat -I POSTROUTING -o eth0 -s 10.8.0.0/24 -j MASQUERADE
server is a linux. lets assume its ip is: 1.1.1.1
client 1 is a mac on adsl, its local network is: 192.168.10.xxx, and its static vpn ip is: 10.8.0.10, with local ip: 192.168.10.10
client 2 is a mac on: 2.2.2.1, and the subnet I'm trying to route is: 2.2.50.0. its static vpn ip is: 10.8.0.20
I can ping client1 on 192.168.10.10 from all other machines, and I can ssh to it (extremely slow, to the point of being totally useless). All other machines on this subnet are inaccessible.
I can't ping anything on 2.2.50.0 at all.
server config:
port 1194
proto udp
dev tun
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
topology subnet
keepalive 10 60
ping-timer-rem
ca privnet/ca.crt
cert privnet/server.crt
key privnet/server.key
dh privnet/dh1024.pem
tls-auth privnet/ta.key 0
client-config-dir ccd
route 192.168.10.0 255.255.255.0 10.8.0.1
route 2.2.50.0 255.255.255.0 10.8.0.1
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
clients config:
client
dev tun
proto udp
remote 1.1.1.1 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert clientXX.crt
key clientXX.key
ns-cert-type server
tls-auth ta.key 1
comp-lzo
verb 3
ccd client 1:
ifconfig-push 10.8.0.10 255.255.255.0
iroute 192.168.10.0 255.255.255.0
ccd client 2:
ifconfig-push 10.8.0.20 255.255.255.0
iroute 2.2.50.0 255.255.255.0
What am I doing wrong?
