Multiple routed lans not working

shinedown99

I am working on a remote vpn solution based on DD-WRT Linksys Routers.

I want to achieve the following goals:
1. Client 1 has to ping and access the Computers behind Router1 (and only behind them)
2. Client 2 has to ping and access the Computers behind Router2 (and only behind them)
3. all computers connected to the Router have to have the same addresses (for example computer1 (connected to the Router) is always 192.168.10.10)
4. So ClientX should always ping 192.168.10.10 and get the answer from Computer1 behind RouterX
5. there has to be only one Client connected to the correlating Router)
So I will only start the Client1 configuration and it

I am now really strugelling with the routing.
I can connect to the VPN and the Router connects also to the VPN, but I can not make the connection between client1 and the computer behind the Router working)

I created the ccd folder and for every client i made the following ccd file
##ccd file client1##
ifconfig-push 10.10.0.1
push "route 192.168.10.0 255.255.255.0 10.10.0.102
iroute 10.10.1.0 255.255.255.0

the ccd file for router1 looks like:
###ccd file router1 ###
ifconfig-push 10.10.0.101
push "route 192.168.10.0 255.255.255.0 10.10.0.102
iroute 10.10.0.101 255.255.255.0

what am I missing?
Did I make some real big mistake?
Thanks for every clue
Hank

Traffic

shinedown99 wrote##ccd file client1##
ifconfig-push 10.10.0.1

You appear to be pushing the server VPN IP to the client for ifconfig, also --ifconfig-push takes at least two parameters.

shinedown99 wrote###ccd file router1 ###
iroute 10.10.0.101 255.255.255.0

You appear to be setting -iroute to the VPN subnet, also 10.10.0.101 is not a subnet in relation the the netmask 255.255.255.0 ..

Lots of errors, please read this:
HOWTO: Expanding the scope of the VPN to include additional machines

shinedown99

Thank you very much Traffic.
Thank you for showing me those mistake with my config files.

I changed now the Router and the Client config according to the Man Page you shown me.

It is really a big help.

I think I will need the rest of the Day to check this out.

I will post in the evening if I did succed,
I still don't know how to solve my Addressing Problem (this is the main reason why I want to route the whole subnet).
As far as I was reading and trying I need either to make NAT or to use the Iptables rules to rewrite the addresses.

So in the end I will solve this scenario:

[client 1]   ->                     -> [Router1]                   ->       [client 1-20]
10.10.0.1                                10.9.0.1/192.168.1.1              192.168.1.-192.168.20
                          [server]
                          10.8.0.1

[client 2]   ->                     -> [Router2]                   ->       [client 1-20]
10.10.0.2                                10.9.0.2/192.168.1.1              192.168.1.-192.168.20

On the weekend I did succed with setting up the tunnel and ping'ing the router.

my config looks at the moment like this (before reading the man page!):

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp
client-config-dir ccd

push "route 10.8.0.0 255.255.255.0"
push "route 10.9.1.0 255.255.255.0"
~~~~~~~~~~~~~~~~~~~~~~~~~
push "route 10.9.10.0 255.255.255.0"

push "route 10.10.1.0 255.255.255.0"
~~~~~~~~~~~~~~~~~~~~~~~~~
push "route 10.10.10.0 255.255.255.0"

route 10.9.1.0 255.255.255.0
~~~~~~~~~~~~~~~~~~~~~~~~~
route 10.9.8.0 255.255.255.0


route 192.168.10.0 255.255.255.0
client-to-client
keepalive 10 1440
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log         /var/log/bz_old_openvpn.log
log-append  /var/log/bz_old_openvpn.log
verb 6
mute 50

my ccd file for the first router (also before reading the article) looks like this:

iroute 10.10.1.0 255.255.255.0

Thank you very much

shinedown99

Thank you Traffic.
After my answer somehow got lost in the System I try to write it again 🙂

I want to route One Network between one client and one router.

[Client 1] [Router 1]
- [Device 1]

[VPN Server]
[Client 2] [Router 2]

shinedown99

Thank you Traffic.
After my answer somehow got lost in the System I try to write it again 🙂

I want to route One Network between one client and one router.

10.9.0.1                                      10.10.0.1
[Client 1]                                   [Router 1]  Lan Adress 192.168.1.10  
       |                                            |         -   [Device 1] 192.168.1.1
       |                                            |         -   [Device 2] 192.168.1.2
       |                                            |         -   [Device 3] 192.168.1.3
       |                                            |
       --------------[VPN Server]---------
       |                                           |
10.9.0.2                                     10.10.0.2
[Client 2]                                  [Router 2]
                                                       -   [Device 1]192.168.1.1
                                                       -   [Device 2]192.168.1.2
                                                       -   [Device 3]192.168.1.3

So I want to have access from client 2 to router 2 and from client 1 to client 1 and if client 2 connects. I want to have a route over the vpn to the router.
After your advices I was changing the config files and Now I have a connection between server and routers. I am still struggeling with the one route per router settings. I was reading the Howto (https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet.) and tried but it just won't work.

Thank you very much

here is my configuration from the server:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp 0
client-config-dir ccd
#server route
push "route 10.8.0.0 255.255.255.0"
#client routes
push "route 10.9.1.0 255.255.255.0"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
push "route 10.9.10.0 255.255.255.0"
#access routes
push "route 10.10.1.0 255.255.255.0"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
push "route 10.10.10.0 255.255.255.0"
route 10.9.1.0 255.255.255.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~
route 10.9.10.0 255.255.255.0

route 10.10.1.0 255.255.255.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~
route 10.10.10.0 255.255.255.0
client-to-client
keepalive 10 1440
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log         /var/log/bz_old_openvpn.log
log-append  /var/log/bz_old_openvpn.log
verb 3
mute 20
management localhost 7506

Best regards
Hank

Traffic

We have had some problems with moderating posts recently ..

I hope your setup is now working.