Expansion with LAN Client's

vitangelo

Hi,
I would like to expand my OpenVPN configuration, also inserting the LAN of the Clients in the VPN, in practice a configuration like this scheme https://ibb.co/dKn03Mg
With an autonomous class for each client subnet, because I often have the same class in secondary lan.

These below are my current server and client configurations, in particular how do I route the traffic of the Client subnets to the VPN class?

dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/xxx.crt
key /etc/openvpn/easy-rsa/keys/xxx.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.7.0.0 255.255.255.0
client-config-dir /etc/openvpn/ccd
push "route 10.7.0.1 255.255.255.255"
push "route 10.7.0.0 255.255.255.0"
push "route 192.168.1.15 255.255.255.0"
topology subnet
duplicate-cn
keepalive 10 120
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log 20
log openvpn.log
verb 4

dev tun
client
proto udp
remote xxx.xxx 1194
resolv-retry infinite
nobind
tun-mtu 1500
cipher AES-128-CBC
auth-nocache
remote-cert-tls server
persist-key
persist-tun
ca ca.crt
cert ciccio.crt
key ciccio.key
comp-lzo
verb 3

Thanks for any contribution.

300000

You need to config site to site to make client subnet access from server subnet,at the picture that client access server so only client can access server'lan subnet but not server lan can access client'lan subnet that is what you wan now.