frankuit
Hi All,
I have an OpenVPN server running (debian install) with about 190 clients.
this will almost always work, but i got some reports that a client could make connection, but not get traffic across.
after lots of debugging i found out that the macbook of the user had ip: 192.168.10.x(/24) in the hotel that he is in.
problem is, the servers he needs to reach are also in that same network ip range on our side.
so openvpn push routes (from server) are not coming up!
i already tried adding host routes from the server config, but that doesnt seem to work:
push "route 192.168.10.111 255.255.255.255"
i tested this by adding host routes on the client (mac) like:
route add -host 192.168.10.111 <gw ip addres>
and after that i'm able to reach that host.
does anyone have a fix for this on the server side ? (coz i don't want to alter 190 laptops)
Thanks for your time,
Regards,
Frank Uittenbosch
frankuit
well,
for now i have host-only routes added on one client who has this problem, but reconfiguring our entire network here (500+ hosts in various ranges) is not really an option.
damn, i guess sticking to rfc's is not always the best thing to do.
frankuit
The Problem is, that the main network is colliding with that range in hotels.
but say, if i were to create a virtual network on the vpn server, including DNS, (wich clients use) and then use NAT to nat those clients to our internal servers, that might work.
it might be a bit dirty though, since i don't see specifick ip addresses from clients anymore, but only the openvpn NAT address.
