dhughes
New installation.
Linux OpenSuSE server behind a modem/router.
IP forwarding enabled
single network card
eth0 10.168.0.0 255.255.0.0
appropriate ports are forwarded in the modem/router firewall
the server firewall has been disabled
server and modem/router are at a remote unattended location
server.conf is example defaults +
changes necessary for key exchange
server 10.168.8.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
the tunnel gets endpoints 10.168.8.1 and 10.168.8.2
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default gateway 0.0.0.0 UG 0 0 0 eth0
10.168.0.0 * 255.255.0.0 U 0 0 0 eth0
10.168.8.0 10.168.8.2 255.255.255.0 UG 0 0 0 tun0
10.168.8.2 * 255.255.255.255 UH 0 0 0 tun0
The server can access the internet.
The client is a Windows laptop wirelessly connected to an entirely different network.
I want all of the clients network traffic to go through the tunnel.
< /start problem >
Client can successfully connect to the VPN server, but once connected can no longer access the internet.
</end problem>
The server network is not bridged because I was told that doing so would incapacitate administering the machine remotely via SSH.
It would seem the the cleanest configuration would be to have the modem/router to continue to provide the NAT function, DNS services, and routing, but I am open to suggestions.
I have spent several weeks trying different network topologies; with and without the firewall and various iptables forwarding rules; manual routing table changes. All with no success.
