Hi,
I currently have the following setup:
VPNSVR1: 192.168.1.20 255.255.255.0
this IP is a Bridged network connection with the TAP device. This setup is for ethernet bridging (dev TAP).
server.conf:
port 1194
proto udp
dev tap
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
ifconfig-pool-persist ipp.txt
# send DHCP to vpn clients 192.168.1.21-50
server-bridge 192.168.1.20 255.255.255.0 192.168.1.21 192.168.1.50
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS 192.168.1.3"
client-to-client
keepalive 10 120
cipher BF-CBC # Blowfish (default)
tun-mtu 24000
fragment 0
mssfix 0
persist-key
persist-tun
And my client PCs, which are on a 192.168.0.0/255.255.255.0 subnet in the remote office:
client
dev tap
proto udp
remote vpn.*****.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files (x86)\\OpenVPN Technologies\\OpenVPN Client\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN Technologies\\OpenVPN Client\\config\\client.crt"
key "C:\\Program Files (x86)\\OpenVPN Technologies\\OpenVPN Client\\config\\client.key" # This file should be kept secret
ns-cert-type server
cipher BF-CBC
tun-mtu 24000
fragment 0
mssfix 0
This setup WORKS with windows PCs. When connected, I can see (ping) everything behind the VPNSVR1 server, and visa versa. .
The trouble now is I'm trying to get a Tomato firmware router to connect as a client. Using the same config, I have got to the point where the VPN connects and I can see the VPNSVR1. But I cannot see anything behind it. When I ping from the Tomato router to 192.168.1.3 (the dns server), the connection makes it to VPNSVR1 (i can see it with wireshark), which suggests the Tomato routing is good. But the VPN server doesn't route traffic when it's from the Tomato firmware. It still works fine from PCs with an Open VPN client.
What could be the problem here? Is there a differnet configuration needed when the client is a router?
