Hi,
I just wish to connect together 2 private LAN segment. Client A segment --> (Internet)-->Firewall -->OpenVPN server --> LAN B segment 10.22.130.0.
OpenVPN server has segment 11.11.11.0 255.255.255.0
Client has external IP 66.a.b.c.
They are connecting fine and I can ping from client segment B LAN 10.22.130.0, OpenVPN server IP 11.11.11.1 and outside like google 8.8.8.8. From server side
I can ping local LAN 10.22.130.0 and Client virtual IP11.11.11.6 also outside world. My problem is so when tunnel is up I loose external public address for client 66.a.b.c
it's only accessible via virtual IP 11.11.11.6.
What I missed? There is static route on router/firewall for LAN 11.11.11.0/24
Server config:
port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/debian.crt
key /etc/openvpn/certs/debian.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 11.11.11.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# client-config-dir ccd
# route 66.a.b.c 255.255.255.0
push "route 10.22.130.0 255.255.255.0"
push "route 10.22.150.0 255.255.255.0"
client-to-client
keepalive 1 180
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
#log openvpn.log
#status openvpn-status.log
verb 5
mute 20
Client config:
client
remote a.b.c.d
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/client.crt
key /etc/openvpn/certs/client.key
cipher DES-EDE3-CBC
comp-lzo yes
dev tun
proto udp
tls-auth /etc/openvpn/certs/ta.key 1
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup
