Hi,
I installed openvpn into a jail on my Freenas system using this guide.
https://forums.freenas.org/index.php?threads/how-to-install-openvpn-inside-a-jail-in-freenas-9-2-1-6-with-access-to-remote-hosts-via-nat.22873/
I can connect to the VPN just fine, but im unable to reach anything on the lan netowrk, and havent been able to ping anything on the openvpn network either even with me showing a 10.8.0.6 vpn network ip.....I have no idea what else to try
Whats really odd is when I do a ipconfig from windows, it appears I dont have a default gateway in my openvpn side. Isnt that what 10.8.0.1 is supposed to be? Why isnt it there? I tired pinging it with no answer
Here's everything else
openvpn.conf
port 10011
proto udp
dev tun
ca /mnt/openvpn/keys/ca.crt
cert /mnt/openvpn/keys/openvpn-server.crt
key /mnt/openvpn/keys/openvpn-server.key
dh /mnt/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
route 192.168.0.205 255.255.255.0 10.8.0.1
#tls-auth /mnt/openvpn/keys/auth.key 0
#crl-verify /mnt/openvpn/keys/crl.pem
keepalive 10 120
group nobody
user nobody
comp-lzo
persist-key
persist-tun
verb 3
nano /usr/local/etc/ipfw.rules
flush
ipfw -q nat 1 config if epair10b
ipfw -q add nat 1 all from 10.8.0.0/24 to any out via epair10b
ipfw -q add nat 1 all from any to any in via epair10b
rc.conf
portmap_enable="NO"
sshd_enable="NO"
sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
hostname="openvpn"
hostname="openvpn"
devfs_enable="YES"
devfs_system_ruleset="devfsrules_common"
inet6_enable="YES"
ip6addrctl_enable="YES"
openvpn_enable="YES"
openvpn_if="tun"
openvpn_configfile="/mnt/openvpn/openvpn.conf"
openvpn_dir="/mnt/openvpn"
cloned_interfaces="tun"
gateway_enable="YES"
firewall_enable="YES"
firewall_script="/usr/local/etc/ipfw.rules"
ipfw list
[root@openvpn /mnt/openvpn]# ipfw list
00100 nat 1 ip from 10.8.0.0/24 to any out via epair10b
00200 nat 1 ip from any to any in via epair10b
65535 allow ip from any to any
client config
client
dev tun
proto udp
remote [my ddns address] 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert jeff.crt
key jeff.key
#tls-auth auth.key 1
ns-cert-type server
comp-lzo
verb 3
