OpenVPN Client blocking access from other subnets

dahai8

I have OpenVPN client running on a Raspberry Pi. Everything works great as long as I'm accessing it from the same subnet that its on: 192.168.1.x
However, if I try to use the client, SSH or Ping it from another subnet (like 192.168.2.x) it just times out.
If I stop the OpenVPN Service, I can then Ping and SSH into it from other subnets.
How do I configure OpenVPN (Client) to allow access from other subnets on my network?
Thank you!!

dahai8

Nothing, nada, zip zilch, zero?
Nobody knows about this, or what I'm talking about, or how to fix it, really?
Apparently I stumbled upon something hereto unknown in this reality...
I feel 'special'

mwandelaar

Do you redirect your gateway?
If so, your Raspberry Pi is sending the answer into the tunnel except over the local network back to the requesting machine.

dahai8

mwandelaar wroteDo you redirect your gateway?
If so, your Raspberry Pi is sending the answer into the tunnel except over the local network back to the requesting machine.

Ok, yes, the gateway is redirected.
So why does it not redirect over the local network and how would I set it up to do the same with specific other subnets?
I'm assuming some sort of route, but I' not well versed in them.
Thanks!

mwandelaar

If i understand your setup correctly, the R-Pi is:

a openvpn client
to a remote vpn-server
in your local network
redirecting it's gateway to the remote vpn-server

Correct?

In that case this is perfectly normal behaviour. Your local lan is still accessable but by using redirect-gateway everything not on the local lan is presumed to be on the other end of the vpn-tunnel.
So a request from 192.168.2.x/24 to the client on 192.168.1.x/24 is answered into the tunnel. As that's the wrong direction, you'll never get a connection.

Please dive into the routing-options and manually add some local routes to make this work again.

dahai8

Thanks!
I'll dig around and see what I can find