Example for single client with access to server's LAN?

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
len_m
OpenVpn Newbie
Posts: 2
Joined: Thu Sep 02, 2010 3:10 pm

Example for single client with access to server's LAN?

Post by len_m » Fri Sep 10, 2010 4:16 pm

Hello,

I'm sure an example of this must exist since it is a fairly simple and (I'm assuming) common configuration, but have been unable to find it. Here is a description of what I am trying to accomplish --

I have a single roaming client (a laptop) and I would like to access my entire home LAN from it while on the road. I do not care about providing access to/from other computers on the laptop's LAN. My home LAN is composed of a wireless router (the home LAN's gateway) and several computers behind it. I am running the OpenVPN server on one of these computers (Windows 7 Ultimate 64bit OS). I have been able to successfully establish communication between my laptop and the OpenVPN server box, but am a bit confused on how to provide access to the rest of the home LAN. Here are some additional data/questions --
  • 1. The home LAN uses the network 192.168.99.0/24. I use the standard 10.8.0.0/24 network between the OpenVPN server and my laptop over a "tun" device.

    2. The home LAN IP address of the OpenVPN server is 192.168.99.10

    3. The home LAN IP address of the wireless router gateway is 192.168.99.1

    4. Do I need to enable IP packet forwarding on my OpenVPN server? How does accomplish this under Windows 7?

    5. I understand I will need to add a route to the wireless router for the 10.8.0.0/24 network; do I set the gateway for this route to 192.168.99.10 (the OpenVPN server's home LAN IP address)?

    6. I believe I need to push a route to the client for the 192.168.99.0/24 network, is that correct?

    7. Do I need to add any route commands to the server?
Thank you so much for any help anyone can provide. I have tried my best to be clear and succinct, but please let me know if I can elaborate on anything.

Thank you,
Len

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Example for single client with access to server's LAN?

Post by krzee » Mon Sep 13, 2010 5:01 am

len_m wrote:Hello,

I'm sure an example of this must exist since it is a fairly simple and (I'm assuming) common configuration, but have been unable to find it. Here is a description of what I am trying to accomplish --
http://secure-computing.net/wiki/index. ... PN/Routing
4. Do I need to enable IP packet forwarding on my OpenVPN server? How does accomplish this under Windows 7?
Yes.
try this:
http://www.computing.net/answers/window ... /7941.html
I dont run windows, and never used win7, so ive never tried

5. I understand I will need to add a route to the wireless router for the 10.8.0.0/24 network; do I set the gateway for this route to 192.168.99.10 (the OpenVPN server's home LAN IP address)?
Yes.
6. I believe I need to push a route to the client for the 192.168.99.0/24 network, is that correct?
Yes.

7. Do I need to add any route commands to the server?
No.

I hope that helped,
-krzee

len_m
OpenVpn Newbie
Posts: 2
Joined: Thu Sep 02, 2010 3:10 pm

Re: Example for single client with access to server's LAN?

Post by len_m » Mon Sep 13, 2010 1:27 pm

Thank you very much for your reply, krzee.

I tried most of this already, except for turning on the IP forwarding so it obviously didn't work. I will try enabling it and report back. For future reference, it looks like in order to enable IP forwarding on a Windows box, one must use "regedit.exe" and modify the following key to contain a "1" instead of a "0" --
  • Code: Select all

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Example for single client with access to server's LAN?

Post by krzee » Mon Sep 20, 2010 8:09 am

len_m wrote:Thank you very much for your reply, krzee.

I tried most of this already, except for turning on the IP forwarding so it obviously didn't work. I will try enabling it and report back. For future reference, it looks like in order to enable IP forwarding on a Windows box, one must use "regedit.exe" and modify the following key to contain a "1" instead of a "0" --
  • Code: Select all

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter
I know that is true for winXP, I have done it. From my googles I think windows 7 does it different. Please let us know what you find.

Post Reply