[Solved] Can not access local network from server

akamuza

Hello, I need some help with a problem I've been struggling for a while.
My VPN setup is as follows:
1. Remote computer (Windows 2008 R2): 10.0.0.19 with openvpn server installed (10.8.0.1)
2. Local computer (Ubuntu 16.04): 192.168.1.20 with openvpn client installed (10.8.0.6). lan gateway = 192.168.1.1 (that is my router)
3. POS device: 192.168.1.100 - only basic lan setup can be done there, i.e. ip, subnet, gateway

I'd like to have an ability to access my POS device from the remote computer - windows. I know that the best way is to enable port forwarding on my local router by it's not an option as I'm behind NAT.

I've already read
https://openvpn.net/community-resources/expanding-the-scope-of-the-vpn-to-include-additional-machines-on-either-the-client-or-server-subnet/
but I still can not reach 192.168.1.100 from my server.

IP forwarding is enabled in Windows and in Linux
I've created ccd directory with my client file name and added

iroute 192.168.1.0 255.255.255.0

in server.ovpn I've added:

client-config-dir ccd
route 192.168.1.0 255.255.255.0

client-to-client
push "route 192.168.1.0 255.255.255.0"

VPN works as expected, but still no luck with connection to POS deviсe from R2 server.

What do I miss here? Is it at all possible to make it work as I expect?

300000

You need set up site to site connection so unbutu will become node to clien subbet that point remote computer can access the PoS .

Inside cdd you need file name as certificate on client unbutu and open that file input iroute in that file. If not site to site will not working

One more thing you need to do is NAT in unbutu become server as windown openvpn server .

Let say there is no server or client at all . Only point to point connection so it need to jump from virtual ip network card to real network card

Here the ip lanrouting and nat on unbutu you can try . Open terminal on unbutu run with sudo two command to see if it work

perl -pi -e 's/#{1,}?net.ipv4.ip_forward ?= ?(0|1)/net

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE

akamuza

I'm not sure I understood everything you mean. But this single line solved my problem:

sudo iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE

After executing it I can ping and access local POS 192.168.1.100 from remote Windows.

Thank you so much!!

TinCanTech

300000 wrote perl -pi -e 's/#{1,}?net.ipv4.ip_forward ?= ?(0|1)/net

Helpful as concrete boots.

https://community.openvpn.net/openvpn/wiki/265-how-do-i-enable-ip-forwarding

akamuza wrote I've already read
https://openvpn.net/community-resources ... er-subnet/
but I still can not reach 192.168.1.100 from my server.

Please see:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963