client to client configuration

marceloramone

Hello,

I have a server to clients openvpn working on ubuntu server.

Here's my server.conf example:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key                                   
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

Each client have their client.ovpn config file (with the key, crt, ca.crt merged)

My intention is to create a new instance for client to client setup, running from server1.conf over the port 1195.

Can you help me with an config example? Also i need to create a shared key to be installed in all clients, right? Can you help me please?

Thanks in advance!

P.D: Any observation to my actual server.conf will be appreciated.

marceloramone

Hello,

The setup I need is LAN TO LAN. (not bridge)

Pippin

See:
https://community.openvpn.net/openvpn/wiki/RoutedLans

And:
https://openvpn.net/index.php/open-source/documentation/howto.html#security

marceloramone

Thanks pippin.

This is my server1.conf (for openvpn server)

local       1234
dev         tun1
proto       udp
port        1195
mode        server
daemon
topology   subnet
server      10.10.2.0 255.255.255.0
push "route 10.10.2.0 255.255.255.0"
route 10.10.1.0 255.255.255.0 #client1
push "route 10.10.1.0 255.255.255.0" #client1
client-to-client
dh          /etc/openvpn/dh1024.pem
ca          /etc/openvpn/ca.crt
cert        /etc/openvpn/server.crt
key         /etc/openvpn/server.key
keepalive   10 120
comp-lzo
persist-tun
persist-key
client-config-dir ccd
verb   3
status openvpn-status.log
ifconfig-pool-persist ipp.txt
user nobody
group nogroup

ccd: (client1) common name is client1

iroute 10.10.1.0 255.255.255.0

I have some doubts about the client configuration.

How to make the client1 configuration? (in my workstation with openvpn installed)
In my previous setup I created the crt and key in the server and then copy them to my desktop and created a ovpn file to connect the openvpn server and works fine, but in this new setup "lan to lan" i'am confused about the client side conf.

Can someone help me?

Thanks in advance!