Hello,
THE SET-UP:
I have three routers at my disposal, let's call them RUT1, RUT2 and RUT3. Their local ip addresses are:
RUT1 - 192.168.5.1
RUT2 - 192.168.6.1
RUT3 - 192.168.56.1
RUT3 is configured as an OpenVPN server. The virtual IP of the server is 10.0.0.0. RUT1 (vpn ip 10.0.0.6) and RUT2 (vpn ip 10.0.0.10) are clients. I have client-to-client enabled on the server and I can reach RUT1 from RUT2 and vice versa by pinging their virtual ips, for example, I ping RUT2 from RUT1 by just typing ping 10.0.0.10 and I get a response.
THE PROBLEM: while I can reach their virtual ips just fine, I can't seem to reach their local addresses. My server config looks like this:
config openvpn 'server_Zigmas'
option persist_key '1'
option port '1194'
option keepalive '10 120'
option persist_tun '1'
option status '/tmp/openvpn-status_server_Zigmas.log'
option verb '5'
option proto 'udp'
option dev 'tun_s_Zigmas'
option enable '1'
option comp_lzo 'yes'
option cipher 'BF-CBC'
option _auth 'tls'
option _tls_cipher 'all'
option client_to_client '1'
option server '10.0.0.0 255.255.255.0'
option ca '/lib/uci/upload/cbid.openvpn.server_Zigmas.ca'
option cert '/lib/uci/upload/cbid.openvpn.server_Zigmas.cert'
option key '/lib/uci/upload/cbid.openvpn.server_Zigmas.key'
option dh '/lib/uci/upload/cbid.openvpn.server_Zigmas.dh'
option client_config_dir '/etc/openvpn/ccd'
I have two files in /etc/openvpn/ccd called 'client1' and 'client2'. client1 contains this line:
option iroute '192.168.6.0 255.255.255.0'
client2 contains this line:
option iroute '192.168.5.0 255.255.255.0'
I tried adding push options to my server config file like so:
option push 'route 192.168.5.0 255.255.255.0'
option push 'route 192.168.6.0 255.255.255.0'
But after I add these lines and restart OpenVPN, my clients lose connection and access to the router both via SSH and HTTP. I regain access only when I remove those lines.
HELP: can anyone identify the problem here? My goal is to reach one client's LAN from the other client.
THE SET-UP:
I have three routers at my disposal, let's call them RUT1, RUT2 and RUT3. Their local ip addresses are:
RUT1 - 192.168.5.1
RUT2 - 192.168.6.1
RUT3 - 192.168.56.1
RUT3 is configured as an OpenVPN server. The virtual IP of the server is 10.0.0.0. RUT1 (vpn ip 10.0.0.6) and RUT2 (vpn ip 10.0.0.10) are clients. I have client-to-client enabled on the server and I can reach RUT1 from RUT2 and vice versa by pinging their virtual ips, for example, I ping RUT2 from RUT1 by just typing ping 10.0.0.10 and I get a response.
THE PROBLEM: while I can reach their virtual ips just fine, I can't seem to reach their local addresses. My server config looks like this:
config openvpn 'server_Zigmas'
option persist_key '1'
option port '1194'
option keepalive '10 120'
option persist_tun '1'
option status '/tmp/openvpn-status_server_Zigmas.log'
option verb '5'
option proto 'udp'
option dev 'tun_s_Zigmas'
option enable '1'
option comp_lzo 'yes'
option cipher 'BF-CBC'
option _auth 'tls'
option _tls_cipher 'all'
option client_to_client '1'
option server '10.0.0.0 255.255.255.0'
option ca '/lib/uci/upload/cbid.openvpn.server_Zigmas.ca'
option cert '/lib/uci/upload/cbid.openvpn.server_Zigmas.cert'
option key '/lib/uci/upload/cbid.openvpn.server_Zigmas.key'
option dh '/lib/uci/upload/cbid.openvpn.server_Zigmas.dh'
option client_config_dir '/etc/openvpn/ccd'
I have two files in /etc/openvpn/ccd called 'client1' and 'client2'. client1 contains this line:
option iroute '192.168.6.0 255.255.255.0'
client2 contains this line:
option iroute '192.168.5.0 255.255.255.0'
I tried adding push options to my server config file like so:
option push 'route 192.168.5.0 255.255.255.0'
option push 'route 192.168.6.0 255.255.255.0'
But after I add these lines and restart OpenVPN, my clients lose connection and access to the router both via SSH and HTTP. I regain access only when I remove those lines.
HELP: can anyone identify the problem here? My goal is to reach one client's LAN from the other client.