Problem with additional subnet

dehein2

Hello,

I'm trying to setup a windows only server/client connection. I configured openvpn on 1 windows computer to be the server and on another to be the client.
Thats my setup:

WAN <--> DD-WRT Router (192.168.1.254) <--> 192.168.1.0/255.255.255.0

Within the 192.168.1.0 Subnet the VPN Server has the ip 192.168.1.104 and the VPN Ip is 10.8.0.1.
My Client connects to the server and gets the ip 10.8.0.8.

That works fine so far. I'm able to browse network shares and ping the server with both ip's (192.168.1.104 and 10.8.0.1). The Problem now ist that im not able to access other computers (e.g. 192.168.1.100).

The Server.opvn inclues the line
push "route 192.168.1.0 255.255.255.0"

and both routes (10.8.0.0 and 192.168.1.0) are setup correctly on the client.

So what did i do wrong!? 😉

Thanks
Dennis

dehein2

i found this "hint":

Next, you must set up a route on the server-side LAN gateway to route the VPN client subnet (10.8.0.0/24) to the OpenVPN server (this is only necessary if the OpenVPN server and the LAN gateway are different machines).

Do I habe to do that on my Gateway? (DD-WRT Router)??

But is that really possible if i want to access mashines only in one way Client -> Subnet 192.168.1.0 and nerver the other way around?

dehein2

Hi,
now I have a different problem. I'm still able to connect but cant ping 10.8.0.1 or 192.168.1.104 from the client (ip: 10.8.0.6).

What i noticed is a different ip in the vpn log when creating the route. Is that correct??:

Tue Jan 21 10:15:46 2014 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Tue Jan 21 10:15:46 2014 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jan 21 10:15:46 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jan 21 10:15:46 2014 OPTIONS IMPORT: route options modified
Tue Jan 21 10:15:46 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{98EADFA6-AF82-485A-9CDF-5C2137E59EC7}.tap
Tue Jan 21 10:15:46 2014 TAP-Win32 Driver Version 8.4 
Tue Jan 21 10:15:46 2014 TAP-Win32 MTU=1500
Tue Jan 21 10:15:46 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {98EADFA6-AF82-485A-9CDF-5C2137E59EC7} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue Jan 21 10:15:46 2014 Successful ARP Flush on interface [22] {98EADFA6-AF82-485A-9CDF-5C2137E59EC7}
Tue Jan 21 10:15:48 2014 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Tue Jan 21 10:15:48 2014 route ADD 192.168.1.0 MASK 255.255.255.0 10.8.0.5
 OK!
Tue Jan 21 10:15:48 2014 route ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
 OK!
Tue Jan 21 10:15:48 2014 Initialization Sequence Completed

Here are my server and client ovpn-files:

server:

port 1194
proto udp
dev tun
ca ca.crt
cert WuWSrv4.crt
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Client:

client
dev tun
proto udp
remote domain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert jh.crt
key jh.key
comp-lzo
verb 3
route-method exe
route-delay 2

dehein2

Hi,
Thanks. there is no firewall active on any of the computers(server/client) and the Router (serverside) is set to forward all traffic on port 1194 to the openvpn-server.

What i meant was, that the client gets the ip 10.8.0.6 and the route

Tue Jan 21 10:15:48 2014 route ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5

points to 10.8.0.5.

Or am i just confused? In that case: what does the 10.8.0.5 mean? 😉

dehein2

ok,
thanks for the clerification.
I'm able to ping the server again (on both ips) but i still cant reach any other computer in the 192.. subnet.

My Routers touring table looks like this:

Destination LAN NET 	    Subnet Mask 	   Gateway 	        Interface
94.34.157.12	           255.255.255.252    0.0.0.0	           WAN
10.8.0.0	                   255.255.255.0	     192.168.1.104   LAN & WLAN
192.168.1.0	                   255.255.255.0	     0.0.0.0	           LAN & WLAN
169.254.0.0	                   255.255.0.0	     0.0.0.0	           LAN & WLAN
0.0.0.0	                   0.0.0.0	             94.34.157.12	   WAN

any ideas