I'm trying to setup OpenVPN to create a single user experience for my users - thus I want them to use OpenVPN if they are in the office or working remotely. I have a Class B IP address, which is almost fully used, so I decided to use routing with NAT. I have the openVPN setup, and I can connect to the server and ping both ways, client to server & server to client. When I add a route to a specific subnet it works, but as soon as i create a global route for the whole network the VPN connection dies and locks up. Example: I'm using IP range 5.5.0.0/20 for my VPN, and my Class B address of my network is 137.215.0.0/16. If I add [i]push "route 137.215.125.0 255.255.255.0" [/i]- It works! But when I add [i]push "route 137.215.0.0 255.255.0.0"[/i] - the VPN dies and I lose all of my connections, it seems that the routing is incorrect. To solve this problem in the interim, I purchased 30 OpenVPN Access Server Licenses, and it works perfectly. I just need to figure out how to "duplicate" that setup on OpenVPN Community Project. Any Suggestions or help will be appreciated. :?

Use OpenVPN both on local network & remote

ekkesa

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

Mimiko

Hello.

It's completly correct working of the clients. When you use "route 137.215.125.0 255.255.255.0" it works, because your OpenVPN server's public IP does not lie in this mask. It's not 137.215.125.x. If you'll push "route 137.215.y.0 255.255.255.0", where y is the part of OpenVPN server's public IP, then your connection will hang like the "route 137.215.0.0 255.255.0.0". Because OpenVPN client tries to forward the encapsulated tunnel trafic back to tunel insteed of client's public IP, so getting in loop.

Try

push "route 137.215.0.0 255.255.0.0"
push "route 137.215.y.x default net_gateway 1

where 137.215.y.x is the public IP of your OpenVPN server specified in client's cofig file by "remote" option.

ekkesa

Hey,
I will try that on Monday, but logic tells me that willl work for a specific subnet. I need it to work for all clients regardless of their subnet.

I'm thinking it is more of an iptables issue, than a routing issue. But i can be wrong. The problem is the amount of subnet this would be used from. Or am I understanding it wrong.

Thankz

Mimiko

ekkesa wroteI need it to work for all clients regardless of their subnet.

The "push" options must be in OpenVPN server's option. So it will be pushed to every connecting client.

By default, OpenVPN does not route local LAN of OpenVPN server and client. Just connects client's to server. May be this is done by sequrity reasons. So every shared LAN must be pushed in configs.

ekkesa

Solved it.

Mimiko's post helped me in the right direction. I solved it by adding the following route to the server conf.

route "<<OPENVPN SERVER IP>> <<NETWORKMASK>> net_gateway"