Force all clients of a router through ONE OpenVPN connection
Posted: Mon Oct 03, 2011 12:23 pm
Hello people 
,
I would like to achieve what the title says, but after following the wiki guide on
http://www.dd-wrt.com/wiki/index.php/Op ... wo_routers Nothing still.
Traffics from the local router's clients don't go through the VPN connection established by my local router.
My intended network structure looks like so:
[Remote OpenVPN Server] >---- [Remote Router] ------ [Internet] ------ [Security Router] ----< [Local Router] < [Local LAN Clients]
OpenVPN server works for individual computers (establishes connection and will redirect all traffic through). Now I want just the local router (DD-WRT) to make one OpenVPN connection and make all its clients go through it without having to configure on each single client's computer (to access the internet, not just the remote LAN).
So far what I am able to achieve is set the local DD-WRT router up for being an OpenVPN client; it successfully connects and its traffics do go through the vpn. However, I have found no solution to make all the clients-of-the-local-router go through the same connection(by default it doesn't).
Please note that I would like to stay away from bridging (tap) as much as possible because the current routed configuration took me a lot of time to carve, and I am very afraid that it screws up the configurations. But of course if you can point me a working configuration I'll try.
My server config:
My client (individual PCs) config:
My local DD-WRT router client config:
Remote LAN is 192.168.0.0/24
Local LAN is 192.168.1.0/24
VPN LAN is 10.8.0.0/24
By the way, what's the difference between bridged and routed ? If I use bridging can my other individual PCs still go through it ?
I really appreciate your effort to help.
Thanks!
,I would like to achieve what the title says, but after following the wiki guide on
http://www.dd-wrt.com/wiki/index.php/Op ... wo_routers Nothing still.
Traffics from the local router's clients don't go through the VPN connection established by my local router.
My intended network structure looks like so:
[Remote OpenVPN Server] >---- [Remote Router] ------ [Internet] ------ [Security Router] ----< [Local Router] < [Local LAN Clients]
OpenVPN server works for individual computers (establishes connection and will redirect all traffic through). Now I want just the local router (DD-WRT) to make one OpenVPN connection and make all its clients go through it without having to configure on each single client's computer (to access the internet, not just the remote LAN).
So far what I am able to achieve is set the local DD-WRT router up for being an OpenVPN client; it successfully connects and its traffics do go through the vpn. However, I have found no solution to make all the clients-of-the-local-router go through the same connection(by default it doesn't).
Please note that I would like to stay away from bridging (tap) as much as possible because the current routed configuration took me a lot of time to carve, and I am very afraid that it screws up the configurations. But of course if you can point me a working configuration I'll try.
My server config:
Code: Select all
dev tun
tls-server
management 127.0.0.1 1195
server 10.8.0.0 255.255.255.0
port 1194
push "route 192.168.0.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
dh /usr/local/synovpn/etc/openvpn/keys/dh1024.pem
ca /usr/local/synovpn/etc/openvpn/keys/ca.crt
cert /usr/local/synovpn/etc/openvpn/keys/server.crt
key /usr/local/synovpn/etc/openvpn/keys/server.key
max-clients 20
comp-lzo
persist-tun
persist-key
verb 7
keepalive 10 60
reneg-sec 0
tls-auth /usr/local/synovpn/etc/openvpn/keys/ta.key 0
user nobody
group nobody
duplicate-cn
Code: Select all
dev tun
client
remote my_server_ip 1194
redirect-gateway
resolv-retry infinite
pull
proto udp
script-security 2
ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1
ns-cert-type server
cipher BF-CBC
comp-lzo
reneg-sec 0
verb 7
Code: Select all
ca /tmp/openvpncl/ca.crt
cert /tmp/openvpncl/client.crt
key /tmp/openvpncl/client.key
management 127.0.0.1 5001
management-log-cache 50
verb 4
mute 5
log-append /var/log/openvpncl
client
tls-client
resolv-retry infinite
nobind
persist-key
persist-tun
script-security 2
mtu-disc yes
dev tun1
proto udp
cipher bf-cbc
auth sha1
remote my_server_ip 1194
tun-mtu 1500
comp-lzo adaptive
ns-cert-type server
fast-io
tun-ipv6
tls-auth /tmp/openvpncl/ta.key 1
tls-cipher AES128-SHA
Local LAN is 192.168.1.0/24
VPN LAN is 10.8.0.0/24
By the way, what's the difference between bridged and routed ? If I use bridging can my other individual PCs still go through it ?
I really appreciate your effort to help.
Thanks!