Access to devices on the client-side LAN

kamilalek1

I have a VPS server on which I launched an openvpn server, I connect to it using two computers with windows 10.

VPS IP server: 12.12.12.12
Openvpn ip VPS server: 192.168.5.1/24
Computer 1 (client1) local ip address: 192.168.0.15/24
Computer 1 (client1) ip address openvpn: 192.168.5.6/24
Computer 2 (client2) local ip address: 192.168.7.24/24
Computer 2 (client2) ip address openvpn: 192.168.5.7/24
A web server on the client 2 ip network: 192.168.7.40/24

server.conf

server.conf

dev tun
proto udp

local 12.12.12.12
port 1194
topology subnet
client-to-client
server 192.168.5.0 255.255.255.0
verb 1
auth-nocache

persist-key
persist-tun
user nobody
group nobidy


ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh.crt
tls-auth /etc/openvpn/ta.key 0

cipher AES-256-CBC
keepalive 10 120
client-config-dir /etc/openvpn/ccd
ccd-exclusive

route 192.168.7.0 255.255.255.0
push "route 192.168.7.0 255.255.255.0"

ccd/client1

ifconfig-push 192.168.5.6 255.255.255.0

ccd/client2

ifconfig-push 192.168.5.7 255.255.255.0
iroute 192.168.7.0 255.255.255.0

I have enabled IpEnableRouter in the registry on the client2 computer (regedit)
I turned on the routing service and remote access

Using computer 1 (192.168.5.6) I can connect to computer 2 using the addresses 192.168.5.7 and 192.168.7.24.
However, I cannot connect to the www server using the address 192.168.7.40.
How can I access the www server (192.168.7.40) using a computer with ip 192.168.5.6 (192.168.0.15)

TinCanTech

kamilalek1 wrote ccd/client2

ccd klient2
ifconfig-push 192.168.5.7 255.255.255.0
iroute 192.168.7.0 255.255.255.0

I'll assume 'ccd klient2' is a typo .. but that does not bode well for you .. this Forum does have a preview button.

kamilalek1 wrote I have enabled IpEnableRouter in the registry on the client2 computer (regedit)
I turned on the routing service and remote access

Using computer 1 (192.168.5.6) I can connect to computer 2 using the addresses 192.168.5.7 and 192.168.7.24.
However, I cannot connect to the www server using the address 192.168.7.40.
How can I access the www server (192.168.7.40) using a computer with ip 192.168.5.6 (192.168.0.15)

The simple answer is: make all of your computers VPN clients.

The difficult answer is difficult and time consuming and you would need to understand how computer networks actually work by having had some formal training in the subject.

kamilalek1

"ccd klient2" of this entry in the server configuration is commented out.

I do not want to install the openvpn client on the www server that is on the client 2 subnet.
I know this is the simplest method but I don't want to use it.

ping from client1 to ip 192.168.7.24

23:24:07.299434 IP (tos 0x0, ttl 128, id 64550, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.24: ICMP echo request, id 1, seq 37808, length 40
23:24:07.299509 IP (tos 0xc0, ttl 64, id 41097, offset 0, flags [none], proto ICMP (1), length 88)
    192.168.5.1 > 192.168.5.6: ICMP redirect 192.168.7.24 to host 192.168.5.2, length 68
        IP (tos 0x0, ttl 127, id 64550, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.24: ICMP echo request, id 1, seq 37808, length 40
23:24:07.299519 IP (tos 0x0, ttl 127, id 64550, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.24: ICMP echo request, id 1, seq 37808, length 40
23:24:07.307502 IP (tos 0x0, ttl 127, id 27900, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.7.24 > 192.168.5.6: ICMP echo reply, id 1, seq 37808, length 40
23:24:07.307544 IP (tos 0x0, ttl 126, id 27900, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.7.24 > 192.168.5.6: ICMP echo reply, id 1, seq 37808, length 40
23:24:08.303098 IP (tos 0x0, ttl 128, id 64551, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.24: ICMP echo request, id 1, seq 37809, length 40
23:24:08.303151 IP (tos 0xc0, ttl 64, id 41140, offset 0, flags [none], proto ICMP (1), length 88)
    192.168.5.1 > 192.168.5.6: ICMP redirect 192.168.7.24 to host 192.168.5.2, length 68
        IP (tos 0x0, ttl 127, id 64551, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.24: ICMP echo request, id 1, seq 37809, length 40
23:24:08.303158 IP (tos 0x0, ttl 127, id 64551, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.24: ICMP echo request, id 1, seq 37809, length 40
23:24:08.311138 IP (tos 0x0, ttl 127, id 27901, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.7.24 > 192.168.5.6: ICMP echo reply, id 1, seq 37809, length 40
23:24:08.311163 IP (tos 0x0, ttl 126, id 27901, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.7.24 > 192.168.5.6: ICMP echo reply, id 1, seq 37809, length 40

ping from client1 to ip 192.168.7.40

tcpdump: listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes
23:32:25.660415 IP (tos 0x0, ttl 128, id 16154, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.40: ICMP echo request, id 1, seq 37810, length 40
23:32:25.660566 IP (tos 0xc0, ttl 64, id 2904, offset 0, flags [none], proto ICMP (1), length 88)
    192.168.5.1 > 192.168.5.6: ICMP redirect 192.168.7.40 to host 192.168.5.2, length 68
        IP (tos 0x0, ttl 127, id 16154, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.40: ICMP echo request, id 1, seq 37810, length 40
23:32:25.660577 IP (tos 0x0, ttl 127, id 16154, offset 0, flags [none], proto ICMP (1), length 60)
    192.168.5.6 > 192.168.7.40: ICMP echo request, id 1, seq 37810, length 40