Hello, despite best efforts to find a solution to this I have not finding anything useful and hitting roadblocks.
I am trying to send connections to two subnets over VPN (working) and all other traffic straight out to the internet (not working).
My setup.
Server
Ubuntu with 3 interfaces
- eth0 - internet (200.200.200.200)
- eth1 - lan1 (10.1.1.1)
- eth2 - lan2 (10.2.2.1)
Client
Ubuntu laptop with one interface.
server.conf
local 200.200.200.200 #not real...
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/VPN.crt
key /etc/openvpn/easy-rsa/keys/VPN.key
dh /etc/openvpn/easy-rsa/keys/dh4096.pem
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-256-CBC
comp-lzo
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.1.1.0 255.255.255.0"
push "route 10.2.2.0 255.255.255.0"
keepalive 10 120
persist-key
persist-tun
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log
verb 3
mute 20
client.conf
client
dev tun
proto udp
remote 200.200.200.200 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert user1.crt
key user1.key
ns-cert-type server
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 3
What's working so far:
I can bring up the tunnel and connect to servers connected to the two interfaces on server.
All attempts to connect to the internet from the client fail while the VPN is up, I'm sure it is something obvious I am missing but can not figure out what. Any one able to shed some light?