[Solved] Clean Routing from the OpenVPN server

jompsi

Hi all,

I want to build an OpenVPN where clients can log them in to the office network. So it's a Client-to-Network environment.

Office Network:
10.200.1.0/24

OpenVPN Network:
10.8.0.0/24

I have a server in the office network, which is running OpenVPN. The office IP of the server is 10.200.1.95 and the OpenVPN IP is 10.8.0.1. If i connect a client to the OpenVPN server I can ping 10.8.0.1 and as well 10.200.1.95 but the rest of the office network is not reachable.

The OpenVPN server is running Debian 7.4.0.

Server conf-File:

cd /etc/openvpn
dev tun0
port 1194
proto udp
tun-mtu 1500
fragment 1300
mssfix
mode server
server 10.8.0.0 255.255.255.0
keepalive 10 60
ifconfig-pool-persist ipp.txt
push "route 10.200.1.0 255.255.255.0"
tls-server
crl-verify crls/crl.pem
auth SHA1
dh dh1024.pem
cipher AES-256-CBC
pkcs12 certs/openvpn.p12
comp-lzo yes
verb 3
log /etc/openvpn/c2n_debug.log

Client conf-File:

cd /etc/openvpn
remote dns-name
dev tun0
port 1194
proto udp
tun-mtu 1500
fragment 1300
mssfix
pull
tls-client
auth SHA1
cipher AES-256-CBC
pkcs12 certs/joel_sony.p12
comp-lzo yes
verb 3
log /etc/openvpn/c2n_client.log

The OpenVPN connection establishes well, but I dont know, what I have to do, that the client sees the whole network? Is it something with iptables?

I am very gratefull for every help 🙂

If you need something more, just ask 😉

Thanks a lot and kind regards
jompsi

jompsi

Morning

I entered the following iptables statements on th eopenvpn server and now it works:

iptables -A FORWARD -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

I have another question about the routing from a network to network connection. Should I open a new task for this, or can i ask my question in this one?

Thanks and regards
jompsi