nekron
Hi ...
i want to reach the complete network over an local pc running openvpn - without changing and route / default routes on the destination machines.
my client config:
dev tun
client
cipher AES-128-CBC
auth SHA256
auth-nocache
nobind
verb 3
route-delay 2
remote-cert-tls server
resolv-retry 10
client-nat snat 192.168.188.0 255.255.255.0 172.17.0.0
client-nat dnat 172.17.0.0 255.255.255.0 192.168.188.0
Connection is working, i can ping the remote pc but not into the network 192.168.188.x. by a ping 172.17.0.s
IP Routing is enabled, running
OpenVPN 2.5.6 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 16 2022
maybe anyone can help ?
running a ping 192.168.188.1 from server wireshark shows the packet on clients local interface:
from: 172.30.0.1 -> 192.168.188.1 ICMP...... (no response found)
i think there is no route back (client cannot be the network gateway)
how to nat the vpn 172.30.0.1 to client ip ? is there any internal way ?
best regards,
nekron
openvpn_inc
Hi nekron,
Is there any reason you're not just routing this traffic?
regards, rob0
nekron
Hello rob0,
can't just route - the target device has no settings for an gateway - only access from local network.
i can access network devices with an route to the vpn client or an default gateway to the vpn client - but not the device i want ;( And i only have a windows pc on the client side ... no linux at all.
Maybe you have an idea ?