dlookung
hi everyone,
i was looking for some help over the internet and i can't find the solution.
I need to access to the private networks behind the client VPN.
From the client VPN i can reach all my network behind my OpenVPN server.
From the PC with the OpenVPN server i can reach only the VPN IP of the client (10.8.0.6)
Here is my configuration
Windows 7 as server - private network 172.16.1.50
local 172.16.1.50
port 1194
proto udp
dev tun
dev-node TAP1
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
push "route 172.16.1.0 255.255.255.0"
route 192.168.1.0 255.255.255.0
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Windows XP - Client private network 192.168.1.133
client
dev tun
dev-node TAP1
proto udp
remote MY_PUBLIC_IP 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client1.crt"
key "C:\\Program Files\\OpenVPN\\config\\client1.key"
ns-cert-type server
comp-lzo
push "route 192.168.1.0 255.255.255.0"
route 192.168.1.0 255.255.255.0
verb 3
my ccd/client has
iroute 192.168.1.0 255.255.255.0
In both machines IP-fordwarding is enable.
the client can access to all private network on the server site (172.16.1.x)
the ping request sending by client has source IP 10.8.0.6 and it's
the ping request sending by server has source IP 10.8.0.1 and not response
I'm making a prototype and i would like to replicate this on different machines and monitoring server. I'll have a monitoring server behind my OpenVPN server and so many clients, and i need to connect to the netwroks behind the clients.
Thanks for your help.
Diego
dlookung
hi, thanks for your reply.
i think i'm already did all the configurations mentioned on the howto. The route, iroute, ccd file (as you can see on the config's posted.
I can ping from the Openvpn server machine to the 10.8.0.6 (client Openvpn machine) but not the 192.168.1.133 (client local IP).
IP forwarding was enabled in both windows machines
Did i miss something?
What you mean for "--topology subnet"?
Thanks!
