Help Setting Up OpenVPN Server Bridge

jdubmaster

I am new to OpenVPN and have setup the Access Server with no problems, but I don't think AS can do what is needed at work.

History: My work uses OSDial auto dialer running CentOS 6.5 and has a server cluster at our HQ in FL. Our office is adding a remote server to the cluster and our server needs to be linked to all 5 servers in the cluster. Each server in the cluster has a public IP on eth0 and private static IP (10.0.0.xx) on eth1. There is not a DHCP server, so IPs have to be static.

Our server needs to be connected to their network, communicate to the other servers and all servers in the cluster need to communicate with our server.
I tried using OpenVPN AS and could ping all servers, but all the servers in the cluster (other than the one running AS) could not ping our server. Also, the cluster does not need to be able to communicate with any other machines on our side.

What is the best and most efficient way to implement OpenVPN for this scenario?

Traffic

Title:

Help Setting Up OpenVPN Server Bridge

For Bridging:

jdubmaster wrote am new to OpenVPN
<snip>
What is the best and most efficient way to implement OpenVPN for this scenario?

Not bridging but routing ..

Please see the HOWTO:

jdubmaster

I have the VPN setup and can ping between the VPN machines, but am unable to ping the servers eth1 IP (10.0.0.5) or any other machines on the network (10.0.0.0/24 subnet)

server.conf

dev tun
ifconfig 10.99.0.1 10.99.0.2
secret static.key
push "route 10.0.0.0 255.255.255.0"
keepalive 10 120

client.conf

remote 198.xxx.xxx.xxx
dev tun
ifconfig 10.99.0.2 10.99.0.1
secret static.key

I have put eth1 (LAN) in promiscuous mode and run this command after:
echo 1 > /proc/sys/net/ipv4/ip_forward

I also added 10.99.0.0/24 to the APF firewall.

jdubmaster

I changed my client.conf to this:

remote 198.178.127.246
dev tun
ifconfig 10.99.0.2 10.99.0.1
secret static.key
route 10.0.0.0 255.255.255.0

and added the route.

I can now ping 10.0.0.5 (VPN Server LAN IP) but am unable to ping any other machines on the subnet. I think I need to create a NAT rule or route that sends traffic between the VPN. There is no router to do this, so it has to be done on the VPN Server or on each machine on the LAN. Just not sure how to do it yet.