On Tue, Dec 8, 2015 at 7:52 PM, Selva Nair <selva.n...@gmail.com> wrote:
> Hi, > > On Tue, Dec 8, 2015 at 5:00 AM, Vnpenguin <vnpeng...@vnoss.org> wrote: > >> >> Here's my current config: http://pastebin.com/i92SA4dh >> > > Configs are ok, except for the redundant push that Jan Just mentioned. > > Here's my network schema: http://s12.postimg.org/lvl9llv19/Open_VPN_1.png >> >> With these config, I CAN : >> 1) From 192.168.254.4 ping to anyhost of client LAN. >> > 2) From 192.168.1.31 ping to anyhost of server LAN. >> > >> My OpenVPN boxes are not default Gateway of two LAN. >> > > If connectivity between several clients on either side is desired, its > best to add the required routes on the gateways: > > On the server side gateway > add a route to 192.168.1.0/24 via 192.168.254.4 > On client side gateway > add a route to 192.168.254.0/24 via 192.168.1.31 > > (how to add those routes depend on the OS on the gateways). > > Addiitonal routes to 10.100.4.1 and .2 on the gateways are also useful, > but I suspect those are already in place -- else 1) and 2) mentioned above > wouldn't have worked. > > >> I don't know howto ping server LAN from 192.168.1.32 (another host of >> client LAN) for example. >> I need new routing table for 192.168.1.32, or I need iptables rules ? >> > > Neither. Setup the routes on the gateways. Required routes on the vpn > hosts will be added by OpenVPN as per your configs. Leave the clients > sending all non-local traffic to their gateways. > > If it doesn't work please provide routing tables on the two vpn machines > and the two gateways. > > Thank you your help! It works now :) Regards,
------------------------------------------------------------------------------
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users