Dotaz: openvpn klient na wl-500g, jeho klienti pristup do vpn site

[maxdata]

Zdravim,
mam funkcni openvpn server -> client (ping a vse ok). Klient VPN je na ASUS WL-500G (oleg firmware umisteny na flash pameti), potrebuji aby jeho klienti z LAN meli pristup do vpn site. Myslim si ze to bude o tom udelat nat na WL-500g z lokalni site do vpn, prosim o radu. Lokalni sit pridelovana pres DHCP z WL-500g je 192.168.1.x a brana je 192.168.1.1.

Kdyz to shrnu PC s win 192.168.1.224 a branou 192.168.1.1 (asus wl-500g) mel pristup pres vpn clienta bezicim na WL-500g s adresou 172.16.5.8 do cele vpn site 172.16.5.0/24. Obraceny smer neni potreba, staci kdyz ostatni VPN clienti (172.16.5.x) uvidi jen 172.16.5.8.
Predem diky za jakoukoliv radu.

nastaveni:

server.conf

mode server
tls-server
dev tap
port 1192
proto udp

client-to-client

ifconfig  172.16.5.1 255.255.255.0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
log /var/log/openvpn
status /var/run/vpn.status 10
keepalive 10 120
persist-key
persist-tun
mute 20
user nobody
group nogroup
verb 4

client.conf

remote 89.203.xx.xx
port 1192
proto udp
tls-client
dev tap0
#mute 10

ifconfig 172.16.5.8 255.255.255.0

ca /opt/etc/openvpn/keys/ca.crt
cert /opt/etc/openvpn/keys/maxdata.crt
key /opt/etc/openvpn/keys/maxdata.key

persist-tun
persist-key

log /tmp/openvpn.log
status /tmp/vpnstatus.log

ping 15
ping-restart 45
ping-timer-rem
verb 4

---

---

Odpovědi

[Martin H.]

iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 172.16.5.0/24 -j SNAT --to-source 172.16.5.8

plus forwarding..

NN

[maxdata]

To bylo presne ono, dekuji.