Hello, I have looked everywhere but I just can't seem to figure this out. I was hoping people could help.
I have a home dhcp network created by a regular home router. The network is 10.0.1.0/24. I set up an openvpn server on a gentoo machine at 10.0.1.11. The network that the vpn creates is 10.0.90.0/24.
right now I can connect from my client but I can only access the server and nothing else on the 10.0.1.0/24 network. I would like to be able to reach every machine on that network. I thought that the line ' push "route 10.0.1.0 255.255.255.0" ' should have accomplished that.
Server openvpn.conf:
# server binding port
port 1194
# openvpn protocol, could be tcp / udp / tcp6 / udp6
proto udp
# tun/tap device
dev tun0
# keys configuration, use generated keys
ca /root/easy-rsa/keys/ca.crt
cert /root/easy-rsa/keys/XXXXXX.crt
key /root/easy-rsa/keys/XXXXXX.key
dh /root/easy-rsa/keys/dh2048.pem
# optional tls-auth key to secure identifying
tls-auth /root/easy-rsa/keys/ta.key 0
# OpenVPN 'virtual' network infomation, network and mask
server 10.0.90.0 255.255.255.0
# persistent device and key settings
persist-key
persist-tun
ifconfig-pool-persist ipp.txt
# pushing route tables
route 10.0.90.0 255.255.255.0
push "route 10.0.1.0 255.255.255.0"
# connection
keepalive 10 120
comp-lzo
user nobody
group nobody
# logging
status openvpn-status.log
log /etc/openvpn/openvpn.log
verb 4
Client client.conf:
# specify client-side
client
# tun/tap devcie
dev tun0
# protocol, according to server
proto udp
# server address
remote XXXSERVER_NAMEXXX 1194
# connection
comp-lzo
resolv-retry 30
nobind
# persistent device and keys
persist-key
persist-tun
# keys settings
ca /root/certs/ca.crt
cert /root/certs/XXXX.crt
key /root/certs/XXXX.key
# optional tls-auth
tls-auth /root/certs/ta.key 1
# ask server for cert
remote-cert-tls server
tls-remote
#ns-cert-type server
# logging
log /etc/openvpn/openvpn.log
verb 4
ps: Also I get the warning message
Wed Mar 30 00:27:16 2016 us=672610 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Does anyone know what might be causing this?
