Access to client lan

[eseelke]

I am having a wee bit of trouble getting OpenVPN to work.

I have an EdgeRouter PoE running as an OpenVPN server. This will be domain1.lan. I have two Tomato routers and an Android phone as clients. These will be domain2.lan and domain3.lan.

The Android client seems to work fine. I am able to access domain1.lan by IP and domain. I am not, however, trying to access Android phone from home network.

The two routers connect. From the client network I can access domain1.lan by IP and domain. But, I cannot access either domain2.lan or domain3.lan either by IP or domain. But, I can access the clients from one another.

domain1.lan is 192.168.0.0/24
domain2.lan is 192.168.2.0/24
domain3.lan is 192.168.4.0/24

domain1.lan is using a single ovpn file for configuration. I am using "set interfaces openvpn vtun0 config-file /config/auth/domain1.ovpn" to setup OpenVPN.

Code: Select all

dev tun
proto udp
port 1195
topology subnet
server 10.8.0.0 255.255.255.0
client-config-dir /config/auth/ccd
ifconfig-pool-persist /config/auth/ipp.txt
push "route 192.168.0.0 255.255.255.0"
push "dhcp-option DOMAIN domain1.lan"
push "dhcp-option DNS 192.168.0.1"
route 192.168.1.0 255.255.255.0
route 192.168.2.0 255.255.255.0
route 192.168.3.0 255.255.255.0
route 192.168.4.0 255.255.255.0
client-to-client
cipher AES-128-CBC
comp-lzo
persist-key
persist-tun
persist-local-ip
persist-remote-ip
keepalive 8 30
status /config/auth/openvpn-status.log

<ca>

</ca>
<cert>

</cert>
<key>

</key>
<dh>

</dh>

I am also using client specific directives.
ccd/domain2

Code: Select all

iroute 192.168.2.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.3.0 255.255.255.0"
push "route 192.168.4.0 255.255.255.0"

Much thanks for any help.

Eddie

[maikcat]

can you post domain2 client config?

Michael.