Expose other subnet to clients?

shawly

Hi,

so I've set up a new VPS at my hoster, this time instead of installing everything on the VPS directly, I went with LXC containers.
So far so good I've set up my OVPN server where my home router is connected to and exposes my home network (192.168.0.0/24) to all my VPN clients. I've also set up a caching DNS for faster name resolving of my home devices.

So I drew a little diagram to make my setup a little more clear, at least, I hope it does clear things up.

I also included the relevant config parts in the image.
So the question is, like I also wrote in the image, how can I expose the subnet 10.1.0.0/24 to all my VPN clients, so I can access 10.1.0.1 or 10.1.0.100 via ssh from my home network or my remote laptop?

I've already tried to add route 10.1.0.0 255.255.255.0 to my server config, but I can still only access the OVPN server on 10.1.0.101 but not the VPS on 10.1.0.1. When I'm logged into my OVPN container I can access the VPS directly via ssh on 10.1.0.1 and also my other container on 10.1.0.100, so it's probably(?) just a setting I'm missing.

Could someone help me out a little?
Thanks!

proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.2.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
push "route 10.1.0.0 255.255.255.0" #didn't work
client-config-dir /etc/openvpn/ccd
route 192.168.0.0 255.255.255.0
route 10.1.0.0 255.255.255.0 #didn't work
route 10.3.0.0 255.255.255.0
push "dhcp-option DNS 10.2.0.1"
push "dhcp-option DNS 10.3.0.1"
client-to-client
keepalive 10 120
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 4

shawly

`//////////////////////////////push

shawly

push............................

Traffic

I have looked at this a few times and cannot really understand it .. try improving your question.

It may be easier for you to learn routing than for us to pick apart your network.

shawly

Well I don't know how I should explain this... English isn't my main language so it's a little difficult to express what I want. Hell, even in my own language it's kinda difficult. :?

I just want to share the complete subnet of 10.1.0.0/24 with all my clients, but like I said, using route 10.1.0.0 255.255.255.0 + push "route 10.1.0.0 255.255.255.0" didn't work. I couldn't access other machines from that subnet except for the machine that is hosting the OpenVPN server (10.1.0.101).

I maybe just've missed some iptables rules?

Traffic

If you can give me remote access perhaps I can work it out .. but I will require a fee for work.

shawly

I figured out the problem it was the problem that has been described on this page: https://community.openvpn.net/openvpn/wiki/RoutedLans#ROUTESTOADDOUTSIDEOFOPENVPN

So all I had to do was routing 10.2.0.0/24 to 10.1.0.101 (route add -net 10.2.0.0/24 gw 10.1.0.101) on my VPS and I finally got access to my host and other containers. 😃
The main issue was, I was googling with the wrong keywords. :oops:

Traffic

Great .. thanks for letting us know how you solved your problem 8-)