openvpn:considerations
OpenVPN - Considerations
route add 192.168.0.0 mask 255.255.255.0 192.168.1.254; route add 192.168.0.0 mask 255.255.255.0 192.168.0.254; route add 192.168.0.0 mask 255.255.255.0 10.0.1.1; route add -net 10.1.13.0/24 gw 10.1.1.1 route add 10.200.40.0 255.255.255.0 10.200.40.3 push "route 10.66.0.0 255.255.255.0"; push "route 192.168.0.0 255.255.255.0"; push "redirect-gateway def1"; push "route 10.1.10.0 255.255.255.0"; push "dhcp-option DNS 10.1.10.51"; push "redirect-gateway local def1" script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf iroute 192.168.4.0 255.255.255.0 route 192.168.4.0 255.255.255.0 client-to-client push "route 192.168.4.0 255.255.255.0" push "dhcp-option DNS 10.66.0.4" push "dhcp-option DNS 10.66.0.5" push "dhcp-option WINS 10.66.0.8" –route network/IP [netmask] [gateway] [metric] vpn_gateway — The remote VPN endpoint address (derived either from –route-gateway or the second parameter to –ifconfig when –dev tun is specified). net_gateway — The pre-existing IP default gateway, read from the routing table (not supported on all OSes). remote_host — The –remote address if OpenVPN is being run in client mode, and is undefined in server mode. route add -net 10.0.0.0 netmask 255.255.255.0 gw $5 Setting parameter 121 in dhcp. Networking and routing between subnets works perfectly.
References
https://openvpn.net/community-resources/how-to/
https://openvpn.net/community-resources/reference-manual-for-openvpn-2-0/
https://backreference.org/2009/11/15/openvpn-and-iroute/
https://forum.netgate.com/topic/42556/open-vpn-push-routes
https://docs.netgate.com/pfsense/en/latest/book/openvpn/custom-configuration-options.html
https://www.vikash.nl/pfsense-with-routed-iptv-and-openvpn-client-for-private-internet-access/
https://docs.netgate.com/pfsense/en/latest/book/openvpn/troubleshooting-openvpn.html
https://superuser.com/questions/1218330/how-to-use-push-route-10-0-0-0-255-255-255-0-on-pfsense
openvpn/considerations.txt · Last modified: 2020/07/15 09:30 by 127.0.0.1