Using OpenVPN and keeping access to LAN

[illunious]

Not using it to play poker.

If it is the case that rewards aren't allowed on CTH I apologize (didn't see this on the sticky), feel free to delete this and I'll start one without that.

[funkyworms]

NP. I don't think it's in the sticky.

I've successfully set up OpenVPN and can ping between both OpenVPN peers, however I cannot reach any of the other machines on the subnet. What's the problem?

*

Make sure that the firewall is not filtering the TUN/TAP interface.
*

Make sure you have IP forwarding enabled on the server.
* If you are using routing (not ethernet bridging), make sure the clients (or LAN gateway) have a route back to the server for the packets coming in over the tunnel. This can be done by:
o adding a route in your default gateway for the VPN network IP subnet pointing to the OpenVPN machine,
o adding a route to every client, or
o NATing all VPN traffic to the local address of the OpenVPN machine for network traffic which leaves the OpenVPN machine for the local net.
*

If you are still stumped, use tcpdump, ethereal, or WinDump to determine where packets are being dropped.

[kerowo]

Yea, why isn't it on the sticky?

[funkyworms]

[ QUOTE ]
Yea, why isn't it allowed?

[/ QUOTE ]

FYP

[kerowo]

I figure it's not allowed because no one wants to deal with the drama bombs... "I want my two dollars"

[SamIAm]

[ QUOTE ]
Yea, why isn't it on the sticky?

[/ QUOTE ]
I don't know what you're talking about. It's, um, right over there. In that newly edited part.

[ QUOTE ]
I figure it's not allowed because no one wants to deal with the drama bombs... "I want my two dollars"

[/ QUOTE ]
Exactly. We kept getting crossposts, where they'd offer one reward between two forums. Or even two sites. It was always a little weird, since it implies that folks w/o rewards wouldn't get helped, so with the drama, we nixed the whole tangle.
-Sam

[illunious]

[ QUOTE ]
NP. I don't think it's in the sticky.

I've successfully set up OpenVPN and can ping between both OpenVPN peers, however I cannot reach any of the other machines on the subnet. What's the problem?

*

Make sure that the firewall is not filtering the TUN/TAP interface.
*

Make sure you have IP forwarding enabled on the server.
* If you are using routing (not ethernet bridging), make sure the clients (or LAN gateway) have a route back to the server for the packets coming in over the tunnel. This can be done by:
o adding a route in your default gateway for the VPN network IP subnet pointing to the OpenVPN machine,
o adding a route to every client, or
o NATing all VPN traffic to the local address of the OpenVPN machine for network traffic which leaves the OpenVPN machine for the local net.
*

If you are still stumped, use tcpdump, ethereal, or WinDump to determine where packets are being dropped.

[/ QUOTE ]

Is this not to get access to machines on the remote network? This looks like stuff that you would do on the server side.

"adding a route to every client" might be what I need but I have no idea what that involves. I tried using "push" in the config but it said that's a server option. Also tried doing ipconfig 192.168.1.0 255.255.255.0, but that didn't work, not even sure if I'm on the right path.

[funkyworms]

will you post your "ipconfig /all" results?

[illunious]

[ QUOTE ]
will you post your "ipconfig /all" results?

[/ QUOTE ]

Don't know what I did, but I think I got it working on my other box (wasn't working on my laptop). I need a couple hours to test it, but PM me your FT name funky and I'll ship the $10 if it's really working.

[funkyworms]

Not necessary.