Openvpn Issues

Joined
Dec 10, 2006
Messages
540
I am having some issues currently with my OpenVPN connection. The client is no longer able to access the remote network other than the server. On the remote network the server is the only one who can access the client. Please help.

Server Config
Code:
; daemon configuration
daemon
mode server
tls-server
proto udp
port 1194
user openvpn
group openvpn

cd /var/openvpn
client-config-dir clients


; tunnel configuration

dev tap1
server-bridge 10.100.2.1 255.255.255.0 10.100.2.225 10.100.2.254
push "route-gateway 10.100.2.1"

client-to-client

passtos
comp-lzo
management 127.0.0.1 5555
keepalive 10 120

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

persist-key
persist-tun
persist-local-ip
persist-remote-ip


; logging and status

writepid /var/run/openvpn.pid
ifconfig-pool-persist openvpn.leases
status /var/log/openvpn/openvpn-status.log
verb 1


; certificates and authentication

dh /var/efw/openvpn/dh1024.pem
ca /var/efw/openvpn/cacert.pem
cert /var/efw/openvpn/hostcert.pem
key /var/efw/openvpn/hostkey.pem

auth-user-pass-verify "/usr/bin/openvpn-auth" via-file
username-as-common-name

client-cert-not-required

client-connect "/usr/local/bin/dir.d-exec /etc/openvpn/client-connect.d/"
client-disconnect "/usr/local/bin/dir.d-exec /etc/openvpn/client-disconnect.d/"
Client Connection
Code:
/usr/local/sbin/openvpn --client --pull --comp-lzo --nobind --dev tap0 --ca /etc/cacert.pem --auth-user-pass /etc/openvpnusers --remote xxx.xxx.xxx.xxx --ping-restart 120
Server Routes
Code:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
x.x.x.x        *               255.255.255.128   U     0      0        0 eth1
10.100.2.0      *               255.255.255.0   U     0      0        0 br0
default         eth2.4       0.0.0.0         UG    0      0        0 eth0
Client Routes
Code:
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.100.2.0      *               255.255.255.0   U     0      0        0 tap0
x.x.x.x         *               255.255.0.0     U     0      0        0 eth0
default         192.0.2.1       0.0.0.0         UG    0      0        0 eth0
 
Back
Top