Page 1 of 1

Client cannot access server Lan

Posted: Wed Mar 16, 2022 2:13 pm
by tbemc2
Hello,
I though that my question was trivial, but I couldn't find any relevant answer to my search.

I have a ovpn server version 2.4.11 running on a Centos 8 PC
I cannot manage to give access to the client to the server lan. Can anyone help?
Client can ping server vpn IP, lan server IP, but not any other lan client IP

Server conf:

Code: Select all

port 1197
proto udp
dev tun
user nobody
group nobody
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 192.168.1.1"
push "route 192.168.1.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-crypt tls-crypt.key
crl-verify crl.pem
ca ca.crt
cert server_QBoI9POqqZs8lbnW.crt
key server_QBoI9POqqZs8lbnW.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
client-config-dir /etc/openvpn/ccd
status /var/log/openvpn/status.log
management localhost 7505
verb 4
Client conf

Code: Select all

client
proto udp
explicit-exit-notify
remote x.x.x.x 1197 (this is my box address)
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_QBoI9POqqZs8lbnW name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
route-nopull
verb 3

Re: Client cannot access server Lan

Posted: Wed Mar 16, 2022 2:18 pm
by Pippin

Re: Client cannot access server Lan

Posted: Wed Mar 16, 2022 3:13 pm
by tbemc2
As you can see, I add the line push "route 192.168.1.0 255.255.255.0" to the server conf to route client to the server lan. But is doesn't work

Re: Client cannot access server Lan

Posted: Wed Mar 16, 2022 3:27 pm
by Pippin
That's only one requirement ...

PS
I assume you made a mistake posting the client config...

Re: Client cannot access server Lan

Posted: Wed Mar 16, 2022 4:01 pm
by tbemc2
Sorry Pippin I correct it. Does my configuration files looks ok to you ?

Re: Client cannot access server Lan

Posted: Wed Mar 16, 2022 5:26 pm
by TinCanTech
Pippin wrote:
Wed Mar 16, 2022 3:27 pm
That's only one requirement ...
Famous last words .. :mrgreen:

Re: Client cannot access server Lan

Posted: Wed Mar 16, 2022 7:39 pm
by Pippin
:)
push "route 192.168.1.0 255.255.255.0"
That's only one requirement ...
.

Re: Client cannot access server Lan

Posted: Tue Apr 26, 2022 9:57 am
by tbemc2
Problem solved after commenting the line:
;push "redirect-gateway def1 bypass-dhcp"