Koozali.org: home of the SME Server

OpenVPN Questions

Offline trampas

  • *
  • 9
  • +0/-0
OpenVPN Questions
« on: August 10, 2008, 04:09:55 PM »
I had been trying to use the standard pptp VPN but having issues where I think my ISP is randomly blocking GRE packets. Thus I was trying to install openVPN to get around this problem. Thus I followed this guide:

http://sme.firewall-services.com/spip.php?article4

I can connect to the network but I am having  an issue. Specifically we have two offices one is 192.168.2.x and the SME one is 192.168.3.x. We have set up a VPN box and a route on the SME server such that all the 2.x from the 3.x subnet is forwarded to the VPN box. However when I connect using openVPN I can to get to the 2.x subnet. I can ping the 3.x machines though. I was wondering if the openVPN needs to be a TUN instead of a TAP or if their was some way to configure it to handle the other subnet?

Thanks
Trampas

Offline byte

  • *
  • 2,183
  • +2/-0
Re: OpenVPN Questions
« Reply #1 on: August 10, 2008, 04:21:28 PM »
Moving this topic to the SME 7.x contribs forum, it is more appropriate there. Thanks!
--[byte]--

Have you filled in a Bug Report over @ http://bugs.contribs.org ? Please don't wait to be told this way you help us to help you/others - Thanks!

Offline trampas

  • *
  • 9
  • +0/-0
Re: OpenVPN Questions
« Reply #2 on: August 11, 2008, 03:03:14 AM »
OK after several hours of testing I found that their is a known bug in the network manager for Ubuntu causing the resolv.conf to be updated even if the openvpn configuration was set for only specific IP address. Thus I am now able to connect to the SME on the 192.168.3.0/24 subnet with out a problem and surf internet through local connection. However I still have a problem where after VPNing into SME I have to run the follow to access the 192.168.2.0/24 subnet:
route add -net 192.168.2.0 netmaks 255.255.255.0 gw 192.168.3.2

Is there a way to have OpenVPN automatically issue the above route command? Specifically it would be nice for the windoze folks as that opening a command prompt is well beyond most of them.

Thanks
Trampas