Hi all,
Lets try to explain my setup 1st.
OS used is Linux Debian Lenny
The OpenVPN is running on the same server as an Asterisk server.
The IP of the Asterisk server is 10.0.0.4.
Virtual IP's from openVPN are in the 10.30.0.0/24 range
A client (tom) who I'm having problems with is also using the 10.0.0.0/24 range on his "home" network. His LAN IP is 10.0.0.15
The openVPN connection is made, and the client (tom) does get a virtual IP assigned (10.30.0.6).
10.30.0.6 can be pinged from the server and from ather clients that are connected to the openVPN server.
The true LAN ip (10.0.0.15) can not be pinged.
Now when a client connects with any other LAN IP than one in the 10.0.0.0/24 range both virtual openVPN IP and true LAN IP can be pinged!
As the Asterisk server is only listening on 10.0.0.4, the client (tom) can not connect to the Asterisk server
The server.conf looks like this
port 1194
proto udp
dev tun0
ca ca.crt
cert voip.crt
key voip.key
dh dh1024.pem
server 10.30.0.0 255.255.255.0
cipher BF-CBC
keepalive 10 120
client-to-client
persist-key
persist-tun
log /root/openvpn/sbin/log/vnp.log
status /root/openvpn/sbin/log/openvpn-status.log
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
client-config-dir /root/openvpn/sbin/ccd
verb 3
mute 20
in the CCD directory I do have the file "tom" with: iroute 10.0.0.0 255.255.255.0
IPtables used:
iptables -t nat -A POSTROUTING -s 10.30.0.0/24 -o eth0 -j MASQUERADE
Is there anyway to get the above problem fixed (without geting the user to change his LAN setup)?
Again. All is working fine exept for the client that is using the 10.0.0.0/24 range in his home network.
Thank you for any help on this.
