Access to the local network for clients not responding

[emp?]

Hi,
I am asking for help in solving my problem with access to the local network for clients connected via vpn.
I've searched the forum but can't find a solution that works for me.
I will add that the vpn server is for windows 10.
Forwarding is enabled in windows 10.
Rules on firewall is enabled for UDP port 1194 port is opened.

the vpn itself works fine the client connects but only has access to the server by pinging the address 10.0.10.100
other computers on the local network are not responding

Subnet LAN:
10.0.10.0 255.255.255.0
gateway: 10.0.10.254

LAN ip address server 10.0.10.100
ip address server VPN 10.24.1.1


server.conf

Code: Select all

# Specify a port, a protocol and a device type
port 1194
proto udp
dev tun
# Specify paths to server certificates
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\issued\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\private\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\dh.pem"
# Specify the settings of the IP network your VPN clients will get their IP addresses from
server 10.24.1.0 255.255.255.0
topology subnet
# If you want to allow your clients to connect using the same key, enable the duplicate-cn option (not recommended)
# duplicate-cn
# TLS protection
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ta.key" 0
cipher AES-256-GCM
# Other options
keepalive 20 60
persist-key
persist-tun
client-to-client
status "C:\\Program Files\\OpenVPN\\log\\status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
#client-config-dir "C:\\Program Files\\OpenVPN\\config\\ccd"
verb 3
mute 20
windows-driver wintun
#push "redirect-gateway def1"
push "route 10.24.1.0 255.255.255.0"
push "route 10.0.10.0 255.255.255.0"


#push "dhcp-option DNS 10.0.10.254"
#push "dhcp-option WINS 10.0.10.254"

client.conf

Code: Select all

client
dev tun
proto udp
remote <external ip address> 1194
resolv-retry infinite
nobind
persist-key
persist-tun

<ca>
code
</ca>

<cert>
code
</cert>

<key>
code
</key>

<tls-auth>
code
</tls-auth>

key-direction 1

remote-cert-tls server

cipher AES-256-GCM
connect-retry-max 25
verb 3

[emp?]

The solution to this problem is to set up routing on the client you are connecting to
ADD -p <subnet vpn> <mask> <gateway open vpn server>
example:
in cmd line with administrtor privileges

Code: Select all

ADD -p 10.24.1.0 mask 255.255.255.0 10.0.10.100

I hope I helped someone.