Client unreachable when connected to VPN

s10

Hi All,

I've setup a working VPN server, with only one problem.
When i connect with my home LAN via my vpn, one client within the network is unreachable.

Im guessing that this is caused by the fact that this specific client has a 24/7 connection with a different OpenVPN server (which is not under my administration).
i've been trying to push a route so this client is reachable when im connected to my home LAN.

This is my server config

push "route 192.168.1.0 255.255.255.0"
server 10.8.0.0 255.255.255.0
dev tun0
proto tcp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

# Only use crl-verify if you are using the revoke list &#-106; otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl

# management parameter allows DD-WRT&#-110;s OpenVPN Status web page to access the servers management port
# port must be 5001 for scripts embedded in firmware to work
management localhost 5001

comp-lzo no
cipher AES-128-CBC

This is my route output, from a reachable client within the VPN network

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.1.1     0.0.0.0         UG    202    0        0 eth0
192.168.1.0     *               255.255.255.0   U     202    0        0 eth0

This is my route output, from a unreachable client within the VPN network

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         10.9.0.5        128.0.0.0       UG    0      0        0 tun0
default         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
8.8.8.8         192.168.1.1     255.255.255.255 UGH   0      0        0 eth0
10.9.0.1        10.9.0.5        255.255.255.255 UGH   0      0        0 tun0
10.9.0.5        *               255.255.255.255 UH    0      0        0 tun0
128.0.0.0       10.9.0.5        128.0.0.0       UG    0      0        0 tun0
179.43.133.114  192.168.1.1     255.255.255.255 UGH   0      0        0 eth0
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
192.168.1.1     *               255.255.255.255 UH    0      0        0 eth0

What am i doing wrong?

Traffic

s10 wroteone client within the network is unreachable.

<..> this specific client has a 24/7 connection with a different OpenVPN server

And that server pushes redirect-gateway ..

You should be able to resolve the problem by adding a static route to the client for your own VPN network.

s10

Thanks for the tip.

Should add a static route in my router (dd-wrt) or in the openvpn daemon config?
And where should the static route be pointed at?

I pressume this should be the unreachable client ip.
But what gateway should i use?
A. The local gateway (my router 192.168.1.1)
B. The remote vpn gateway

And does this need any extra firewall rules in the iptables?

Thanks for your help

s10

For the record for similar future questions:

I solved the problem bij adding a static route on the unreachable client.

Visual representation of the problem

route add -net  10.8.0.0  netmask 255.255.255.0 gw 192.168.1.1