Connect to a PLC from another client

Atara

good morning, first of all I apologize if it is not the right place to expose my problem, I do not handle the web very well.
I have a server with OpenVPN running and everything is fine.
One of the clients. it has 2 ethernet ports.
The Eth0 port has a fixed ip (192.168.4.4) and goes directly by cable to a Siemens PLC (192.168.4.7). The Eth1 port goes through DCHP to the router and is the one that connects to the OpenVPN server, giving it the ip 10.8.0.10. What I would like is to know if from my pc, connected to the VPN (Ip 10.8.0.2), I can connect to the PLC (192.168.4.7).

I put an image to make it look better.

A greeting!

300000

yes it can but you need setting site to site connection so from openvpn when it have request going to pc 192.168.4.7 it will route though openvpn client . at openvpn client you need NAT and IPforward as the same openvpn server . and on the server it need to have info on routing this line should on server config

"route 192.168.4.0 255.255.255.0 "

on folder openvpn server have folder cdd , inside that folder create a file name as common name client openvpn and open that file name add this line
"iroute 192.168.4.0 255.255.255.0 "

if you carefully research how site to site work and you can make it you can connect from personal pc to 192.169.4.7. there are many examples how site to site work on this site , take time to read and you can do that.

Atara

Thank you very much for the most accurate answer.
I have done what you have told me and added to server.conf
client-config-dir ccd

It works perfectly for me and routes to the LAN.
To finish putting it right, can I make this route only accessible to a specific client? For example, I just want client 10.8.0.2 to be able to reach 192.168.4.7.

Thank you very much again!

300000

Atara wrote Thank you very much for the most accurate answer.
I have done what you have told me and added to server.conf
client-config-dir ccd

It works perfectly for me and routes to the LAN.
To finish putting it right, can I make this route only accessible to a specific client? For example, I just want client 10.8.0.2 to be able to reach 192.168.4.7.

Thank you very much again!

iptables will do that job for you. openvpn only connection so if you want that from openvpn client you can making a rule to block or let going to that subnet.

Auyerix

Hello, good to find this information here!!! It is very close to what I was looking for... Question, is it possible to do the same but using OpenVPN Cloud instead a dedicated server? Thank you!!!!