Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Issues with OpenVPn client traffic / DNS entries
« previous
next »
Print
Pages: [
1
]
Author
Topic: Issues with OpenVPn client traffic / DNS entries (Read 421 times)
Madifor
Newbie
Posts: 35
Karma: 0
Issues with OpenVPn client traffic / DNS entries
«
on:
August 18, 2024, 07:20:18 pm »
Not able to seperate internet traffic with traffic to go to vpn-server and also reach the local dns entries.
As openvpn client using OpenVPnConnec (under windows), but the behaviour described below seems to be the same using the openvpn client app on ios devices.
Steps done:
Configured under VPN-OpenVPN-Instances a configuration for the openvpn server.
The following options are configured
Type ->TUN.
Server -> 10.11.a.b/24 subnet.
Tpopology -> subnet
Created under a selfsigned CA a certificate for the openvpn-server
Defind the LocalNetwork which has to be pushed to the connected client(s).
Under miscellaneious:
Register DNS selected
DNS server -> ip of openvpn server
With nothing configured for the option(s) Push Options & Redirect Gateway, dns server ip is not pushed to this client.
when checking the routing table at the client side i see defualt rout 0.0.0.0/0 -> default gw client
but i dont see an entry for the defined Local Network.
When changing te Redirect Gateway paramter : Default ..
Only change then that the routing table a new entry is created
Subnet 0.0.0.0 ,subnet mask 128.0.0.0 with ip of vpn-server as gateway
Internet is normal accessible… remote ip's still cant be reached
Still no route to the local network.
When also configuring Push Options ->"push register-dns"
no changes in the routing tabel, but funny thing is the "local network " can now be reached .
The DNS Overrids (which are needed to be able reach the Internal Websites), can now also be used pointing to ip's of hosts on the local network . But now all traffic is pushed thru the vpn server, something i dont want.
I want to have all traffic which are not intended to be for the Local subnet(s) to go out via the local internet gateway..
What am i doing wrong ?
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Issues with OpenVPn client traffic / DNS entries