lan configuration

javllar

Hi folks

We need to solve this problem.

We have client-server openvpn configured.
We have client-to-client enabled.

We have one specific subnet (A) an we need for performance purposes to tell clients not to communicate inside this subnet throw vpn.
So if we want all clients inside subnet (A) to communicate directly and not to communicate with Open vpn server.

Thanks for help.

javllar

Config files

Server config
port 1194
proto udp
dev tun
dev-node OpenVPNServerUDP
replay-window 256
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.16.0.0 255.255.240.0
ifconfig-pool-persist ipp.txt
push "route 172.16.16.0 255.255.240.0"
client-to-client
keepalive 3 90
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Client config
ca ca.crt
cert US-US1.crt
key US-US1.key
proto udp
remote myvpnserver 1194
remote myvpnserver2 1194
replay-window 256
#dev-node OpenVPNClientServers
route-delay 5
dev tun
client
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3

javllar

server 109.75.146.118
clients local 172.31.4.2 public 23.29.48.40
local 172.31.4.3 public 23.29.48.41