some basic lines to follow,
use certs for start avoid user based auth,
use the SAME encryption algorithm on both server/client
use the SAME lzo settings on both server/client
use tun for routing
with the above in mind you should create a cert named home
for your home network, the other name it whatever you want
what configs i suggest you should use..
server config
user nobody
group nogroup
dev tun
local xx.xx.xx.xx
port 443
proto tcp
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
server 10.66.66.0 255.255.255.0
client-config-dir /etc/openvpn/ccd
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
persist-tun
persist-key
verb 3
log-append /var/log/openvpn/openvpn.log
status /var/log/openvpn/status.log
cipher AES-256-CBC
# pam-auth
route 192.168.0.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0"
create a ccd file named home with the following contents
iroute 192.168.0.0 255.255.255.0
ifconfig-push 10.66.66.22 10.66.66.21"
client config
client
dev tun
proto tcp-client
remote xx.xx.xx.xx 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert home.crt
key home.key
verb 3
comp-lzo
cipher AES-256-cbc
connect your client with the home cert it should obtain 10.66.66.22 ip,
connect the other client and try to ping both 10.66.66.22 ip and its lan on (192.168.0.x)
Michael.
