toddinpal
I'm trying to connect two sites using openvpn 2.4 running on dd-wrt. I mostly have it working, but the biggest hiccup is that I can't ping machines on the client's network. The server's network is 192.168.42.0/24 and the client's network is 192.168.41.0/24. I push a route for the .42 network to the client and the client can access nodes on the server's network. I also add a route to the .41 network, but from the server's network I can't access any of the client's .41 nodes. My server config looks like:
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port 1194
proto udp
cipher aes-256-cbc
auth sha256
client-connect /tmp/openvpn/clcon.sh
client-disconnect /tmp/openvpn/cldiscon.sh
client-config-dir /jffs/etc/openvpn/ccd
comp-lzo adaptive
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
client-to-client
fast-io
tun-mtu 1400
mtu-disc yes
server 192.168.39.0 255.255.255.0
dev tun2
push "route 192.168.42.0 255.255.255.0"
route 192.168.41.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
client-to-client
And the client's config is:
ca /tmp/openvpncl/ca.crt
cert /tmp/openvpncl/client.crt
key /tmp/openvpncl/client.key
management 127.0.0.1 16
management-log-cache 100
verb 3
mute 3
syslog
writepid /var/run/openvpncl.pid
client
resolv-retry infinite
nobind
persist-key
persist-tun
script-security 2
dev tun1
proto udp
cipher aes-256-cbc
auth sha256
remote xxx.xxx.xxx 1194
comp-lzo yes
tun-mtu 1500
mtu-disc yes
fast-io
I've tried using iroute, but it always gives me an error saying can't be used in this context. Also, I'm guessing to get DNS working such that each side can refer to the other sides nodes by name I need to push the server's DNS server, and add the client's DNS server to the server's DNS list.
Any help would be appreciated.
-tl
