Hi guys (sry for my english), I have the Openvpn server set to [b]tun[/b]. I want to connect many networks. "Master clients" (172.26.0.0) and "normal clients" (172.27.0.0, 172.28.0.0). I need this: "Master client" see all "normal clients" see server and "Master clients" only connection between "normal clients" is not possible I have this: I use the routing like [b]route 172.27.0.0 255.255.0.0[/b], [b]route 172.28.0.0 255.255.0.0[/b] and [b]push "route 172.26.0.0 255.255.0.0"[/b]. I use the [b]client-config-dir ccd[/b] and in ccd folder for "Master client" [b]push route "172.27.0.0 255.255.0.0"[/b] , [b]push route "172.28.0.0 255.255.0.0"[/b], ... , [b]ifconfig-push 172.26.0.5 172.26.0.6[/b]. I use the [b]client-config-dir ccd[/b] and in ccd folder for "normal client" [b]iroute 172.27.1.0[/b] , [b]ifconfig-push 172.26.27.9 172.26.0.10[/b]. If I use the server setting [b]client-to-client[/b], works fine, but if the "normal client" adds route into route table on the client PC, hi can see other normal clients. If I don't use the server setting [b]client-to-client[/b], "Master clients" can not see "normal clients". All can see the server only. I have idea to use the firewall, but the VPN connections inside openvpn are not in iptables. I use the LOG for INPUTS, but I see the WAN IPs only. Not the VPN IPs. And in FORWARD is nothing (0 packets). Is possible to use the [b]tun[/b] setting for this solution? Or I must use the [b]tap[/b] setting and then I can use the firewall? I thanks for every help.

You must use two server instances (example): [list][*]Master clients on Server#1: port 1194 [u]with[/u] --client-to-client [*]Normal clients on Server#2: port 1195 [u]without[/u] --client-to-client[/list]

How to many client networks (groups)

Atomlife

Hi guys (sry for my english),

I have the Openvpn server set to tun.
I want to connect many networks. "Master clients" (172.26.0.0) and "normal clients" (172.27.0.0, 172.28.0.0).
I need this: "Master client" see all
"normal clients" see server and "Master clients" only
connection between "normal clients" is not possible

I have this:
I use the routing like route 172.27.0.0 255.255.0.0, route 172.28.0.0 255.255.0.0 and push "route 172.26.0.0 255.255.0.0".
I use the client-config-dir ccd and in ccd folder for "Master client" push route "172.27.0.0 255.255.0.0" , push route "172.28.0.0 255.255.0.0", ... , ifconfig-push 172.26.0.5 172.26.0.6.
I use the client-config-dir ccd and in ccd folder for "normal client" iroute 172.27.1.0 , ifconfig-push 172.26.27.9 172.26.0.10.
If I use the server setting client-to-client, works fine, but if the "normal client" adds route into route table on the client PC, hi can see other normal clients.
If I don't use the server setting client-to-client, "Master clients" can not see "normal clients". All can see the server only.
I have idea to use the firewall, but the VPN connections inside openvpn are not in iptables. I use the LOG for INPUTS, but I see the WAN IPs only. Not the VPN IPs. And in FORWARD is nothing (0 packets).

Is possible to use the tun setting for this solution? Or I must use the tap setting and then I can use the firewall?
I thanks for every help.

Traffic

You must use two server instances (example):

Master clients on Server#1: port 1194 with --client-to-client
Normal clients on Server#2: port 1195 without --client-to-client

Atomlife

Thak you. Is the possibility.

😉