Re: [Openvpn-users] pushing server network as route to client stops openvpn

[Sascha Lucas <sascha.lucas@xxxxxxxxxxxxxxxxxxxx>]

> >  When ever I push a network route that includes the servers IP, the VPN
> >  connection stops working. I.e. push "route 129.69.90.128 255.255.255.248".
> >  On the client side it looks like this:
>
> ehh... Think about it for a few more seconds.. You are pushing a route to the 
> client that sais that is should route traffic for 129.69.90.128/29 via your 
> OpenVPN tunnel! What about the OpenVPN traffic itself, how is it now supposed 
> to find it´s way to your server 129.69.90.133?

After some seconds of thinking I beleave I just followed the Howto 
(http://openvpn.net/howto.html#scope). p2p works (nothing pushed). So I 
pushed the Servers net "route 129.69.90.128 255.255.255.248". I.e. to 
reach 129.69.90.130 via the VPN.

> You will have to either push a host route for 129.69.90.133 via your old 
> default gateway, or split the subnet into smaller pieces that does not 
> include .133 and push them all.

The host route via my old GW is set by openvpn when useing push 
"redirect-gateway def1"

Fri Dec  2 15:58:22 2005 /sbin/ifconfig tun0 129.69.204.10 pointopoint 
129.69.204.9 mtu 1500
Fri Dec  2 15:58:22 2005 /sbin/route add -net 129.69.90.133 netmask 
255.255.255.255 gw 129.69.11.254
Fri Dec  2 15:58:22 2005 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 
129.69.204.9
Fri Dec  2 15:58:22 2005 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 
gw 129.69.204.9
Fri Dec  2 15:58:22 2005 /sbin/route add -net 129.69.204.1 netmask 
255.255.255.255 gw 129.69.204.9

I want this for not redirect-gateway only.

Sascha.