VPN subnet and printer

screeble

Greetings,

Please help me to resolve the following issue:

I have already configured VPN network and want to use a printer which has another subnet.
For example:

(IP192.168.0.25)PC(VPN10.10.10.10.2) >>> (192.168.0.1)ADSL(WAN) >>> (WAN)OpenVPN server (VPN10.10.10.1).
..............................................................................||
.............................................................Printer(192.168.0.19)

When VPN is enabled I can't use local printer?
Any suggestions? :geek:

Mimiko

From where you cannot use the printer: client or server?
Post server config.
Post routing table on server and client.

screeble

Dear Mimiko,

I'm not able to ping printer not from server nor client.
server.conf

###network variables
mode server
port 1194
proto udp
dev tap

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

plugin /usr/lib/openvpn/openvpn-auth-pam.so common-auth
client-cert-not-required
username-as-common-name
auth MD5
duplicate-cn

###forwarding
server 10.10.10.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 188.72.72.188"
push "dhcp-option DNS 188.72.82.188"
push "dhcp-option DNS 188.72.92.188"

client-to-client

###logs
status openvpn-status.log

log openvpn.log
verb 5

client-config-dir /etc/openvpn/client-configs

keepalive 10 120

client's route

          0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.100     25
          0.0.0.0        128.0.0.0       10.10.10.1       10.10.10.2     31
       10.10.10.0    255.255.255.0         On-link        10.10.10.2    286
       10.10.10.2  255.255.255.255         On-link        10.10.10.2    286
     10.10.10.255  255.255.255.255         On-link        10.10.10.2    286
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0       10.10.10.1       10.10.10.2     31
    188.72.65.190  255.255.255.255      192.168.1.1    192.168.1.100     26
      192.168.0.0    255.255.255.0       10.10.10.1       10.10.10.2     31
      192.168.1.0    255.255.255.0         On-link     192.168.1.100    281
    192.168.1.100  255.255.255.255         On-link     192.168.1.100    281
    192.168.1.255  255.255.255.255         On-link     192.168.1.100    281
     192.168.56.0    255.255.255.0         On-link      192.168.56.1    276
     192.168.56.1  255.255.255.255         On-link      192.168.56.1    276
   192.168.56.255  255.255.255.255         On-link      192.168.56.1    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.56.1    277
        224.0.0.0        240.0.0.0         On-link        10.10.10.2    286
        224.0.0.0        240.0.0.0         On-link     192.168.1.100    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.56.1    276
  255.255.255.255  255.255.255.255         On-link        10.10.10.2    286
  255.255.255.255  255.255.255.255         On-link     192.168.1.100    281
===========================================================================

server route

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.10.10.0      0.0.0.0         255.255.255.0   U     0      0        0 tap0
188.72.64.0     0.0.0.0         255.255.248.0   U     0      0        0 eth0
0.0.0.0         188.72.64.1     0.0.0.0         UG    0      0        0 eth0

Mimiko

I don't see any 192.168.0.25 assigned to your client. The client has IP 192.168.1.100 and gw is 192.168.1.1. So assuming you intentional are making it wrong.

The server has IP at eth0 188.72.64.X with gw 188.72.64.1. If the printer on same LAN is in different IP range, how can your server access it? Its not problem of OpenVPN, but a server's network configuration. This forum is not for correct configuring networking in LAN.

Assign to eth0 on server an IP to fall in same range as printer's IP. That's all.