I've setup an OpenVPN server on CentOS inside of my LAN. The servers on my LAN are on 192.168.1.x addresses, and I put my OpenVPN server on 192.168.2.17. I can ping between 192.168.1.x and 192.168.2.x addresses as I configured my sonicwall to route between these two interfaces.
I'm trying to have my remote IP phone (which has a built in openvpn client) connect to my OpenVPN server. I've already created a 1:1 NAT on my sonicwall and can successfully register with my certificates and connect/authenticate to OpenVPN, and my IP phone is assigned an IP address of 192.168.2.6. So far, so good. I can ping this IP of my remote phone from my OpenVPN server and access its web interface.. however, I cannot ping or access its web interface from any other server on my network (my 192.168.1.x servers).. therefore, the IP phone cannot connect to my phone system (on 192.168.1.2). Also, I cannot ping my openvpn server (192.168.2.17) from my 192.168.1.x servers when the openvpn service is up and running. As soon as I stop the OpenVPN service, I can then ping the OpenVPN server address (192.168.2.17) again.
I suspect that I need some sort of route rule setup on my OpenVPN server machine?
Can anybody suggest what I need to do? Here is my openvpn.conf:
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
# change ip address to vpn client dhcp network address
server 192.168.2.0 255.255.255.0
push "redirect-gateway def1"
# change ip address to local DNS server
push "dhcp-option DNS 192.168.1.6"
keepalive 5 30
persist-key
persist-tun
status openvpn-status.log
verb 6
###################
tls-server
log-append /var/log/openvpn.log
client-to-client
cipher AES-128-CBC
# change yourdomain.com to your domain
# push "dhcp-option DOMAIN testdomain.com"
ifconfig-pool-persist ipp.txt
duplicate-cn
user nobody
group nogroup
Thank you in advance!
