marc.laederach
Good morning
I have configured OpenVPN with SSL and LDAP authentication on OPNsense successfully. But there's one issue which I couldn't solve yet:
I would like to have only a few subnets redirected through the VPN tunnel, all other traffic should use the normal network connection. So if I add the "route-nopull"-option and the routes
route 172.16.0.0 255.255.128.0 net_gateway
route 172.16.128.0 255.255.128.0 net_gateway
route 192.168.233.0 255.255.255.252 net_gateway
to the client config file, the traffic is splitted accordingly. But unfortunately the DNS-Servers and the Domain Suffix are not being configured as it is set on the server. It uses the DNS-Server configured on the active network interface. I also get the following entries in the log:
Wed Dec 07 09:48:11 2016 Options error: option 'route' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'register-dns' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Wed Dec 07 09:48:11 2016 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Is there any solution to this? It would be great to have the internet-traffic not going via the company's network.
Kind Regards
Marc
