Hi All,
I'm using OpenVPN since couple of month for surfing on Internet without my phone or home IP visible.
So I've made an OpenVPN server on FreeBSD and everthings work fine.
Now, I would like to redirect port to my home pc, and something easy begin to be difficult...
I think I need to allow my VPN Network to come in my Home Lan first before redirect port on my VPS FW
First, my server config:
port 1194
proto udp
dev tun
user openvpn
group openvpn
ca /usr/local/etc/openvpn/sslca/ca.crt
cert /usr/local/etc/openvpn/sslca/OpenVPNServer.crt
dh /usr/local/etc/openvpn/sslca/dh4096.pem
key /usr/local/etc/openvpn/sslca/OpenVPNServer.key
tls-auth /usr/local/etc/openvpn/sslca/ta.key 0
server 192.168.253.0 255.255.255.0
#push "redirect-gateway def1 bypass-dhcp"
topology subnet
client-to-client
push "dhcp-option DNS 1.2.3.4"
ifconfig-pool-persist ipp.txt
keepalive 10 60
comp-lzo
push "comp-lzo yes"
cipher AES-256-CBC
max-clients 5
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
log-append /var/log/openvpn.log
ping-timer-rem
sndbuf 393216
rcvbuf 393216
push "sndbuf 393216"
push "rcvbuf 393216"
And my client config:
proto udp
ifconfig-nowarn
client
#connect-retry-max 5
#connect-retry 5
resolv-retry 60
dev tun
remote opnvpnserver 1194
ns-cert-type server
ca /usr/local/etc/openvpn/ca.crt
cert /usr/local/etc/openvpn/mycert.crt
key /usr/local/etc/openvpn/mycert.key
tls-auth /usr/local/etc/openvpn/ta.key 1
user openvpn
group openvpn
comp-lzo
cipher AES-256-CBC
persist-key
persist-tun
nobind
redirect-gateway def1 bypass-dhcp
And here what I want to do:
So I've made a route on my OpenVPN Server (VPS in picture):
# route add 192.168.1.0/24 192.168.253.8
But It won't work 🙁
I'm able to ping all my VPN Client IP, but routing doesn't work :cry:
Don't know why ! Maybe the pirvate class C but in OpenVPN book they use it.
Maybe my FW but when I allow everything, nothing work...
Can you help me ?
