Hi,
On Tue, Dec 8, 2015 at 5:00 AM, Vnpenguin <vnpeng...@vnoss.org> wrote:
>
> Here's my current config: http://pastebin.com/i92SA4dh
>
Configs are ok, except for the redundant push that Jan Just mentioned.
Here's my network schema: http://s12.postimg.org/lvl9llv19/Open_VPN_1.png
>
> With these config, I CAN :
> 1) From 192.168.254.4 ping to anyhost of client LAN.
>
2) From 192.168.1.31 ping to anyhost of server LAN.
>
> My OpenVPN boxes are not default Gateway of two LAN.
>
If connectivity between several clients on either side is desired, its best
to add the required routes on the gateways:
On the server side gateway
add a route to 192.168.1.0/24 via 192.168.254.4
On client side gateway
add a route to 192.168.254.0/24 via 192.168.1.31
(how to add those routes depend on the OS on the gateways).
Addiitonal routes to 10.100.4.1 and .2 on the gateways are also useful, but
I suspect those are already in place -- else 1) and 2) mentioned above
wouldn't have worked.
> I don't know howto ping server LAN from 192.168.1.32 (another host of
> client LAN) for example.
> I need new routing table for 192.168.1.32, or I need iptables rules ?
>
Neither. Setup the routes on the gateways. Required routes on the vpn hosts
will be added by OpenVPN as per your configs. Leave the clients sending all
non-local traffic to their gateways.
If it doesn't work please provide routing tables on the two vpn machines
and the two gateways.
Selva
------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
