bcp81
I have OpenVPN running on a VMWare system.
My eth2 IP is 192.168.1.17 / 255.255.255.0 with a gateway of 192.168.1.1
My OpenVPN client can connect to the external IP I have 1:1 NAT'ed to this 192.168.1.17 address, and they can successfully register with OpenVPN. I'm assigned an IP of 10.10.2.6. I can ping and access this from the console of my OpenVPN server, however, I cannot ping or access this from anywhere else on my network. I do have IP forwarding enabled on the OpenVPN server.
From what I understand, this is a routing issue, but I don't know how to create the right type of route to fix this. I was told that I need to make a route on my firewall (a Sonicwall) to do this.
I have multiple interfaces on my sonicwall:
X0 is my 192.168.1.0 network (gateway IP is 192.168.1.1)
X3 is my 10.10.2.0 network (gateway IP is 10.10.2.254)
I was told that I need to force a gateway of my OpenVPN server (192.168.1.17) to all traffic directed to my 10.10.2.x devices. I created a route in my sonic wall which is:
Source: Any
Destination: X3 Subnet
Service: Any
Gateway: 192.168.1.17
Interface: X0 (I've also tried X3)
I've also tried creating the same as above, but reversing the Source and Destination. I still can't ping or access any devices registered to the OpenVPN server from any computer other than the OpenVPN server itself. Any ideas? Thank you in advance!
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
# change ip address to vpn client dhcp network address
server 10.10.2.0 255.255.255.0
push "redirect-gateway def1"
# change ip address to local DNS server
push "dhcp-option DNS 192.168.1.6"
keepalive 5 30
persist-key
persist-tun
status openvpn-status.log
verb 6
###################
tls-server
log-append /var/log/openvpn.log
client-to-client
cipher AES-128-CBC
# change yourdomain.com to your domain
push "dhcp-option DOMAIN yourdomain.com"
ifconfig-pool-persist ipp.txt
duplicate-cn
user nobody
group nogroup
