Okay here is my situation right now..
I have configured server and client properly and the client connects properly with no problem.
This might be an easy one but I have been working and researching about it for days and cannot figure it out.
My problem right now is accessing LAN. Here is the thing, I am using Ubuntu Server LTS 12.04 and I am using UFW for firewall. Once it is enabled, I cannot access or ping LAN.. BUT if I do disable it, I would be able to connect to or ping LAN with no problems. So I am sure someone here knows the answer. I just want to be able to connect to LAN with my UFW enabled. Right now the only port I allow for UFW concerning OpenVPN is 1194/udp.
Router IP -192.168.1.1
Server IP - 192.168.1.100
LAN IP - 192.168.1.2-192.168.1.250
I have tried some iptable rules that I found but never worked so I flushed them.
Server.conf
local 192.168.1.100
mode server
tls-server
port 1194
proto udp
dev tap0
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"
ca ca.crt
cert makku.crt
key makku.key # This file should be kept secret
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.1.100 255.255.255.0 192.168.1.240 192.168.1.249
push "dhcp-option DNS 192.168.1.1"
push "dhcp-option DOMAIN hostname.com"
client-to-client
keepalive 1 3
comp-lzo
max-clients 3
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
Client.conf
client
dev tap
proto udp
remote hostname.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3
Bridged network /etc/network/interfaces
auto lo br0
iface lo inet loopback
iface br0 inet static
address 192.168.1.100
netmask 255.255.255.0
gateway 192.168.1.1
bridge_ports eth0
iface eth0 inet manual
up ip link set $IFACE up promisc on
down ip link set $IFACE down promisc off
Any help would be appreciated. Thank you.
