aaronsthomas Sorry, I am reasonably new to OpenVPN, and I have been trawling through the forums, so I assume this is a dumb question. But here goes: I have set up an OpenVPN Server using PiVPN at my office. We are using the 192.168.100.x Range and the DHCP Server is 192.168.100.250 At my home the network is 192.168.0.x and the DHCP server \ Gateway is 192.168.0.1. Both are on 255.255.255.0 subnet. Everything works fine except I need to route all the internet traffic through the local internet rather than over the VPN: This is my server conf dev tun proto udp port 1194 ca /etc/openvpn/easy-rsa/pki/ca.crt cert /etc/openvpn/easy-rsa/pki/issued/raspberrypi_fd65b9c4-d6a2-42e1-bd34-b67882581322.crt key /etc/openvpn/easy-rsa/pki/private/raspberrypi_fd65b9c4-d6a2-42e1-bd34-b67882581322.key dh none topology subnet server 10.8.0.0 255.255.255.0 # Set your primary domain name server address for clients push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" # Prevent DNS leaks on Windows #push "block-outside-dns" # Override the Client default gateway by using 0.0.0.0/1 and # 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of # overriding but not wiping out the original default gateway. push "redirect-gateway def1" client-to-client keepalive 1800 3600 remote-cert-tls client tls-version-min 1.2 tls-crypt /etc/openvpn/easy-rsa/pki/ta.key cipher AES-256-CBC auth SHA256 user nobody group nogroup persist-key persist-tun crl-verify /etc/openvpn/crl.pem status /var/log/openvpn-status.log 20 status-version 3 syslog verb 3 tun-mtu 1400 mssfix 1360 and my client config client dev tun proto udp remote xxx.xxx.xxx.216 1194 resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server tls-version-min 1.2 verify-x509-name raspberrypi_fd65b9c4-d6a2-42e1-bd34-b67882581322 name cipher AES-256-CBC auth SHA256 auth-nocache verb 3 <ca> Just wondering if anyone has an obvious solution? Many thanks
TinCanTech aaronsthomas wrote I need to route all the internet traffic through the local internet rather than over the VPN Then do not use this: aaronsthomas wrote push "redirect-gateway def1"
aaronsthomas Sorry I should have mentioned that I tried to remove that \ comment it out and as soon as I do I lose access to my network shares cannot ping devices etc.
