[Openvpn-users] Re: Add new route to a ccd ?

[Noc Phibee <noc@xxxxxxxxxx>]

I have change my coçnfiguration, now i use tun :

the server config:

local IP-PUBLIC
port 1194
proto tcp-server
dev tun
mode server
tls-server
tun-mtu 1500
mssfix
persist-key
persist-tun
dh /etc/ssl/dh1024.pem
ca /etc/ssl/cacert.pem
cert /etc/openvpn/openvpn-server.cert
key /etc/openvpn/openvpn-server-key.pem
tls-auth /etc/openvpn/ta.key 0
ifconfig 192.168.169.1 192.168.169.2
route 192.168.169.0 255.255.255.0
push "route 192.168.169.0 255.255.255.0"
client-config-dir ccd
ccd-exclusive
client-to-client
keepalive 10 120
cipher BF-CBC
comp-lzo
max-clients 15
user openvpn
group openvpn
status /etc/openvpn/log/status.log
log-append /etc/openvpn/log/openvpn.log
verb 4
mute 10


now a ccd client:
ifconfig-push 192.168.169.14 192.168.169.13
iroute 10.100.1.0 255.255.255.0


the client openvpn conf:
client
dev tun
proto tcp
remote IP-PUBLIC 1194
resolv-retry infinite
nobind
tls-client
persist-key
persist-tun
ca cacert.pem
cert certificat.cert
key key.pem
tls-auth ta.key 1
cipher BF-CBC
pull
comp-lzo
verb 2
mute 5

for respect the howto /30 ..

the client ping the server, the server ping the client
but the route 10.100.1.0 are not put on the windows client


thanks for your help










Noc Phibee a écrit :

> Hi
>
> Now, i have a Openvpn box in routed and Windows 2000 user with 
> openvpn-gui.
>
> That work's very good for access to the openvpn box but now i want add 
> a route to
> the user ..
>
> the ccd file:
> ifconfig-push 192.168.169.14 255.255.255.0
> iroute 192.168.169.0 255.255.255.0
>
> on the windows client, i can ping 192.168.169.1, the ip of the
> openvpn box
>
> Manually, after the connection, i can put the route:
> route add 10.100.1.0 mask 255.255.255.0 192.168.169.1
> and now i can ping 10.100.1.1 without problems ...
>
> it's possible that i add to the ccd file this route for automatiquely
> save it on the windows client ?
>
> i have test in the ccd file:
> ifconfig-push 192.168.169.14 255.255.255.0
> iroute 192.168.169.0 255.255.255.0
> iroute 10.100.1.0 255.255.255.0
>
> but no success ...
>
> (i don't want add the same route on all user)
>
> thanks for your help


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users