I would like to connect my notebook to the office LAN using an external server.
Here is a graphical explanation: http://imagebin.org/117473
Server and client in LAN are running Debian Lenny, notebook can run Windows or Lenny, too.
Connection between server and client in LAN already works: IPs can be pinged, but hostnames can't be.
I don't care about the notebook right now, first the connection between server and client and LAN should work fine.
My goal: I want to use WINS or DNS of office LAN to access the hostnames and network shares. Also, using the office LAN's gateway from the notebook would be a great benefit for the future.
Info:
Without CCD-file, I can't ping any IP in LAN.
config of server:
Code: Select all
mode server
proto tcp
dev tun
verb 4
comp-lzo
keepalive 15 120
ifconfig-pool-persist ipp.txt
status status openvpn-status.log
local <hidden>
port 443
server 172.16.0.0 255.255.255.0
user nobody
group nogroup
client-config-dir ccd
;script-security 2
;up /etc/openvpn/update-resolv-conf
;down /etc/openvpn/update-resolv-conf
route 10.0.0.0 255.0.0.0
push "route 10.0.0.0 255.0.0.0"
push "route 172.16.0.0 255.255.255.0"
push "dhcp-option DNS 10.0.100.1"
push "dhcp-option WINS 10.0.100.2"
push "dhcp-option DOMAIN <hidden>.<hidden>.local"
client-to-client
persist-key
persist-tun
ca /opt/keys/ca.crt
cert /opt/keys/server.crt
key /opt/keys/server.key
dh /opt/keys/dh1024.pem
plugin /usr/lib/openvpn/openvpn-auth-pam.so common-auth
client-cert-not-required
username-as-common-name
config of client in LAN:iroute 10.0.0.0 255.0.0.0
Code: Select all
client
proto tcp
dev tun
nobind
pull
verb 4
comp-lzo
remote <hidden> 443
resolv-retry infinite
persist-key
persist-tun
user nobody
group nogroup
ca /opt/keys/ca.crt
auth-user-pass
Lars-Daniel