Hello.
I'm trying to figure out what is wrong with my config but don't know where to start or what I should be searching for in the forums. I'm sure someone has run into this problem before.
OpenVPN connection work without problem except when I end up on a guest network at a client or cafe that has the same subnet as one of the subnets at home. I've tried to force all traffic over openvpn but it doesn't work.
Network
192.168.2.5 client location local IP <-> Client router & firewall <-> internet <-> our static ip <-> openvpn server 10.0.8.0 on gateway <-> 192.168.2.109 (local subnet resource)
Now the printer on the client network has ip 192.168.2.109. So I can't get to the local subnet resource or anything on the 192.168.2.x segment at home. All I get is the client location local network.
So I can learn what I need to do, I'd appreciate if someone could suggest what I should be looking to do. I don't know what to start to look at. And I want to learn this so I can debug stuff myself in the future.
Thanks in advance.
B.
I have a ClearOS 5.2 home server (~Centos 5.8). It runs OpenVPN 2.1_rc20 i386-redhat-linux-gnu [SSL] [LZO2] [EPOLL]
My /etc/openvpn/client.conf on the server is
port 1194
proto udp
dev tun
ca /etc/ssl/ca-cert.pem
cert /etc/ssl/sys-0-cert.pem
key /etc/ssl/private/sys-0-key.pem
dh /etc/ssl/dh1024.pem
server 10.8.0.0 255.255.255.0
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
ifconfig-pool-persist /var/lib/openvpn/ipp.txt
status /var/lib/openvpn/openvpn-status.log
verb 3
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-ldap.so /etc/openvpn/auth-ldap
push "dhcp-option DNS 192.168.1.1"
push "dhcp-option WINS 192.168.1.1"
push "dhcp-option DOMAIN openvpn.domain.com"
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.3.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
My PC config has
client
remote openvpn.domain.com 1194
dev tun
proto udp
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca ca-cert.pem
cert client-USERID-cert.pem
key client-USERID-key.pem
ns-cert-type server
comp-lzo
verb 3
auth-user-pass
