OpenVPN Support Forum

Hello,

in addition to my first request regarding the possible software-bug, I have the need to add additional subnets on the server side, which are allowed to connect to the remote-side of my site-to-site VPN. At the user settings of the AS there is the option called "Allow Access From: all server-side private subnets". The server itself is located at 192.168.200.0/24 and only that Subnet is currently allowed. However, I'm having also clients that are located at 192.168.201.0/24. Is there a possibility to also enter these additional subnets somewhere?

My tempoary solution currently is that I add the following rule manually after establishing the connection: "iptables -A AS0_U_PARENTS_OUT -s 192.168.201.0/24 -j ACCEPT".

Best wishes
Chris

I believe what you are looking for is available in the web admin portal under:
Configuration -> VPN Settings -> Routing -> Specify the private subnets to which all clients should be given access (one per line)

Note also that if you want 192.168.200.0/24 and 192.168.201.0/24, a single CIDR expression of 192.168.200.0/23 includes both.

I <3 subnetting, rob0