Your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might crea

[polenquick]

Hi. I'd like connect remotely using OpenVPN from my work and home. I've just generate .crt files and run server openvpn@server & openvpn@clinet.
I'm not sure what i'm going wrong. I set static IP on my server as 192.168.1.50/24. At client i set up remote public IP from https://www.whatismyip.com/.
When i ran

Code: Select all

journalctl -xeu openvpn@server

i recieve that response : Your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN.

I also configured ipp.txt - it contains 10.0.0.4,zdalny

OpenVPN version 2.5.5, Ubuntu Server 22.04, Raspberry 4

server.conf

Code: Select all

local 192.168.1.50
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh.pem
topology subnet
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist /var/log/openvpn/ipp.txt
client-to-client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
verb 3
explicit-exit-notify 1

client.conf

Code: Select all

client
dev tun
proto udp
remote xx.xxx.xx.xx 1194
;remote-random
resolv-retry infinite
;nobind
;user nobody
;group nobody
persist-key
persist-tun
ca ca.crt
cert zdalny.crt
key zdalny.key
remote-cert-tls server
cipher AES-256-CBC
data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC
verb 3

[ordex]

That message is just a warning. It is telling you that the LAN uses a very common IP network, therefore, if a client using the same IP network in its LAN connects to your server there *might* be issues. It all depends on your actual setup.

[polenquick]

Thanks for the answer! However I don't understand one thing. I must have to set Public IP on client. How is this public address to know that it's to assign me an IP address from the pool of declared addresses in the server configuration? Do I need to enable some port forwarding at the access point? When i type "whats my ip" on Google i get my public IP adress. Is there any solution which allows me pernamently set static Public IP for free? I guess when my access point shuts down or expired lease my public IP may be different.