Need OpenVPN routing help!

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
I have a corporate side LAN running Windows 2003 (AD, DHCP, WINS & DNS)

Server LAN IP 192.168.1.8/24 GW 192.168.1.254 (Netopia DSL Cayman 3500 router)

RRAS disabled and registry IPEnableRouter on

Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
Value: IPEnableRouter

OpenVPN server IP 10.8.0.1

----------------------------

Remote client side

LAN IP 10.1.1.6 GW 10.1.1.1

OpenVPN IP 10.8.0.2

---------------------------

Client and server can ping and see each other and view files on thier disks either way,
but Client can't ping any workstations on 192.168.1.0 network or vice versa.

I follow pretty much the instruction at http://www.runpcrun.com/howtoopenvpn
but I really don't have idea how to add a route.

Cayman can let me add a static route, it's like

Destination Network:
Netmask:
Gateway:
Metric:
RIP Advertise : Split Horizon/Always/Never

What should I do? Add a route on router (Netopia) or add a route on the server? And what should it look like?

I'm really bad at routing concept. Thanks!

*EDIT*
-----------------------------
server.ovpn contents:
-----------------------------
## server.ovpn ##

port 1194
proto udp

dev tun

dev-node MyTAP

topology subnet

ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"

server 10.8.0.0 255.255.255.0

push "route 192.168.1.0 255.255.255.0"
push "dhcp-option WINS 192.168.1.8"
push "dhcp-option DNS 192.168.1.8"
push "dhcp-option DOMAIN mydomain.local"

keepalive 10 120
comp-lzo

persist-key
persist-tun

status openvpn-status.log
verb 3
 

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
Got it working after some experiment!

On the Cayman router
Destination Network: 10.8.0.0
Netmask: 255.255.255.0
Gateway: 192.168.1.8
Metric: 3 (I randomly choose a number)
RIP Advertise : Split Horizon/Always/Never (I leave it at default Split Horizon, since I have no idea what it is)

Maybe someone can explain it to me why it works?

Does the above command let the router check check the packet and forward it to the destination? From server side to cilent side only? Client side to server side? Or both ways?

Why the destination network is not 192.168.1.0 and gateway 10.8.0.1?