NAT for subnet behind client

Campus

Hi,

I am running a working OpenVPN setup with clients connecting to a OpenVPN server. The server currently pushes several routes for other subnets either coming from the server machine network or from the network behind one of the clients:

192.168.2.0/24 (additional network behind server)
-- 192.168.0.0/24 (OpenVPN server, Linux)
---- Client A (Linux) - 192.18.0.0/16 (network behind client)
---- Client B (Windows) - 192.18.10.0/24 (network behind client)

If Client B now wants to access a machine in the network of Client A or in the 192.168.2.0/24 network I need to prepare that machine to have the correct routing for the packets of the source network 192.18.10.0/24 back to the VPN. I would like to get rid if this. I read about the new --client-nat feature but the documentation is really too short or I am too noob to understand whether this might help here or not.
I would really appreciate if someone could point me into the right direction to improve the configuration.

Thanks,
Campus

Campus

debbie10t wrote
Campus wroteI read about the new --client-nat feature but the documentation is really too short or I am too noob to understand whether this might help here or not.
--client-nat would not help you.

--client-nat is useful-ish if you have network conflicts that you can not avoid.

Why would it not help? Wouldn't the effect be the one I would like to get? Maybe NAT is not correct enough. What I would like to have is masquerading for all of the source networks when accessing the other networks. What would be the recommended way of doing this?

Thanks,
Campus

Campus

Thanks for the clarification. I clearly misunderstood the client-nas feature and will need to use ipfilter to achieve what I want.

Thanks for your help,
Campus