VPN only if extern, not intern

peleroform

Dear all,

I hope I use the correct subforum, if not please move to the correct one.

I am looking since nearly a week to solve my problem (maybe just a problem in my mind), but I do not find anything about that. Maybe I use the wrong keywords.

So I will - at the moment the hardware is not deliverd until yet - run an openvpn server in my local lan where all my clients (laptops) can connect to the local lan if they are extern and not connected to the local lan. BUT if the clients are connected to the local lan they should not be use the openvpn server to connect to other clients in the local lan - they should use than the local lan IPs 192.178.0.x and not the openvpn once 10.2.2.x .

What can I do to get that result? Is there anything in the configs ?

The clients are win and linux systems
The vpn server will be installed on a raspberry pi.

By the way, I am a newbie in openvpn.

Thanks for your help

peleroform

bigal.nz

Ok - that would work.

So lets say the external IP is 123.456.789.123 - how would you set it up so that the VPN server will reject connections originating from 123.456.789.123?

Could this be achieved via IP tables? Its almost like banning your own IP on the router or VPN Server.

Cheers

-Al

bigal.nz

I would think something like:

iptables -D INPUT -s xx.xxx.xx.xx -j DROP

-Al