Accessing Server From Client Via The Server's Remote LAN IP

ryley

Hi everyone. I've setup an OpenVPN server on my NAS running Arch Linux and it's working well except for one issue. I would like my clients to be able to access the NAS via it's remote LAN IP (192.168.0.242). This is because some services are configured to listen only on certain interfaces and I'd prefer to not change these.

At the moment my clients can access the NAS via 10.8.0.1 and the NAS can access the clients through each 10.8.0.x IP. All internet traffic from the clients is successfully routed through the server and the clients can access all other machines on the remote (192.168.0.0) LAN.

Sorry if this a stupid question, it's just that last frustrating issue I need to tick off before it's working perfectly for my needs.

This is my OpenVPN server configuration:

local 192.168.0.242

port 1194

proto udp

dev tun

ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key

dh /etc/openvpn/dh2048.pem

server 10.8.0.0 255.255.255.0
route 10.8.0.0 255.255.255.0

push "redirect-gateway def1"
push "route 10.8.0.0 255.255.255.0"
push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"

keepalive 10 120

tls-auth /etc/openvpn/server/ta.key 0

comp-lzo

user nobody
group nobody

persist-key
persist-tun

The only additional routing/forwarding I do is enabled by this:

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o enp3s0 -j MASQUERADE

TinCanTech

HOWTO: Expanding the scope of the VPN to include additional machines

Also NOTE:

your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!:

You are advised to change your server LAN to a more unique RFC1918 compliant subnet. f.e 192.168.143.0/24

ryley

Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN

Thanks for the suggestion. I saw that warning but I assumed that because I can access every other client on the remote LAN and I can also access the internet through the VPN that I didn't have any routing issues. I'll give that a try now.