Hi,
I'm trying to connect two remote offices together using Open VPN to allow two servers to communicate. I don't want a tunnel as I dont want all internet trafffic to go to the West office, just the traffic destined for the local intranet.
In the West office there is an Asus RT-AC56U (10.10.1.250) with LAN subnet 10.10.1.0. Here there is also the Domain controller on 10.10.1.1 which handles DNS for the offices.
in the East office there is an Asus RT-N16 (10.0.0.1) with Tomato Version 1.28 by shibby, with Lan subnet 10.0.0.0
I have setup the West office Asus RT-AC56U as the Open VPN Server with the following details:
Interface Type TAP
Protocol UDP
Server Port 1195
Authorization Mode TLS
Username/Password Auth. only No
Extra HMAC authorization Disable
Allocate from DHCP No
Client Address Pool 10.10.1.51 - 10.10.1.99
Direct clients to redirect Internet traffic Yes
Respond to DNS Yes
Encryption Cipher BF-CBC
Compression Adaptive
Allow Client <-> Client Yes
Allow only specified clients No
Custom config:
push "dhcp-option DNS 10.10.1.1"
Now in the Tomato OpenVPN Client, I have:
Interface Type TAP
Protocol UDP
Server Address/ Port ***** 1195
Firewall AUtomatic
Authorization Mode TLS
Extra HMAX Authorization Disabled
Server is on the same subnet DISABLED
Create NAT on Tunnel ENABLED
Redirect Internet traffic DISABLED
Accept DNS configuration Exclusive
Encryption cipher BF-CBC
Compression Adaptive
When I start the VPN it connects, and the Tomato Client adds a route to its config:
10.10.1.0 * 255.255.255.0 0 tap12
So all the computers in the East (Client Side) office can now ping and see the DNS server in the West office fine.
The trouble I'm having is from a pc in the West office, I can't ping an IP in the East Office. When I do a tracert command, the RT-AC56U VPN Server router sends the trace to a public IP rather than sending it back to the OpenVPN Client. This obviosuly times out as the 10.* ip is internal.
C:\Documents and Settings\****>tracert 10.0.0.1
Tracing route to 10.0.0.1 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 10.10.1.250
2 12 ms 11 ms 12 ms 81.148.96.1
3 12 ms 12 ms 12 ms 213.120.178.141
4 13 ms 13 ms 13 ms 213.120.177.98
5 13 ms 13 ms 12 ms 213.120.178.65
6 13 ms 13 ms 13 ms
When I look at the Routing table of RT-AC56U there is no subnet 10.0.0.0. How do I configure the OpenVPN Server to send all IPs with subnect 10.0.0.0/255.255.255.0 back to the OpenVPN Client where that subnet resides?
Unfortunately I don't have the .ovpn config files as the routers don't use them, but the client.ovpn file that the Asus RT-AC56U exports for me looks like:
client
dev tap
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap
proto udp
remote ******.asuscomm.com 1195
float
cipher BF-CBC
comp-lzo adaptive
keepalive 15 60
auth-user-pass
ns-cert-type server
resolv-retry infinite
nobind
Any help/advice is greatly appreciated.
