wdenny3885 New to open vpn here, but have spent almost a whole day trying to research this and get it to work. Will do my best to explain the current setup, and I am not entirely sure it is an OpenVPN problem, but I am out of Ideas. It works going from client subnetted devices to the server subnet devices, but not the other way. Site A: WAN > Asus RT-AC68U with Open VPN Server Running > LAN WAN IP > LAN 192.168.1.0/24 > OpenVPN 10.8.0.1 (Server) Site B: WAN > Asus RT-AC68U with OpenVPN Client running > LAN WAN IP > LAN 192.168.3.0/24 > OpenVPN Client 10.8.06 (Client) Added static route to router 192.168.1.0 > GW 10.8.0.1 (Although, probably not necessary as I enabled Push LAN in the server advanced setting) What works: Site B Host 192.168.3.172 - access to all hosts on 192.168.1.X (yea, what is SHOULD DO) What doesn't work: Site A Host 192.168.1.100 (PC) cannot ping or access anything on 192.168.3.X SO - trying to add static route on Asus RT-AC68U for 192.168.3.0 >10.8.0.1 - but it will not take it, i enter it, and then it continues to reboot and it is not in the routing tables. I am not sure what to try next as I have been reading over both Asus and Open VPN forums all night. Any direction would be appreciated. The whole purpose of the setup is to access hosts on the client side in 192.168.3.X, without having to run vpn clients on them directly. (I.e. - they are devices, not machines that can run vpn client - cameras, sensors etc.)
TinCanTech I do not know how your router would handle this but you need to use --iroute (internal route) to enable routing to a client side LAN. Please see: HOWTO: Expanding the scope of the VPN to include additional machines You will probably need to check your router manual as well.
wdenny3885 Thank you for the reply, I will read that again, but I am a little confused on which router you are suggesting the routes be added? I also put together a diagram to illustrate what I have setup and what is working/not working.
TinCanTech My comment was with regard to --iroute not --route. --iroute is required when using openvpn in --server mode, required on the server end. It may be easier to achieve your goal by using "point to point" mode and not use --server. (that is as you appear to understand how to route your VPN end point LANs)
