docf
I'm trying to set up external VPN access to a pentesting network lab we have on our network without giving access to the local network.
Our work network is using 10.0.0.0/24 and has access to the internet. We have a small server running our pentesting lab using 192.168.0.0/24 with a Ubuntu server VM running as DHCP server and gateway (2 interfaces - eth0=192.168.0.1 and eth1=10.0.0.150). The server hosts multiple vulnerable VMs on the 192.168.0.0/24 range which cannot be given internet access.
How do I configure OpenVPN on the Ubuntu VM to give VPN access from the internet with each client being given a 192.168.0.0/24 IP by the DHCP server, but without any of the vulnerable VMs in the lab having access to the internet?
I'm guessing I have to bridge the 192.168.0.1 adapter with the VPN? If so, how does this affect the config and/or iptables?
Any help would be greatly appreciated, as we've been smashing our heads against a wall with this one for a while.
R