OpenVPN routing

[Maciej Milewski]

On Wednesday 27 of April 2011 01:15:09, Ryan Coleman wrote:
> Maciej,
> Here you go:
> Ryan-Colemans-MacBook-Pro:~ ryanjcole$ netstat -rn
> Routing tables
> Internet:
> Destination        Gateway            Flags        Refs      Use   Netif
> Expire default            10.0.1.1           UGSc           61        0   
>  en1 10.0.1/24          link#5             UCS             3        0    
> en1 10.0.1.1           0:23:12:f7:37:cc   UHLWI          89     1268    
> en1   1142 10.0.1.2           0:14:d1:1f:79:1b   UHLWI           0     
> 837     en1    183 10.0.1.198         127.0.0.1          UHS             0
>        0     lo0 10.0.1.255         ff:ff:ff:ff:ff:ff  UHLWbI          0  
>      6     en1 127                127.0.0.1          UCS             0    
>    0     lo0 127.0.0.1          127.0.0.1          UH              2      
> 75     lo0 169.254            link#5             UCS             0       
> 0     en1 172.16.87/24       link#7             UC              1        0
>  vmnet1 172.16.87.255      ff:ff:ff:ff:ff:ff  UHLWbI          0        3 
> vmnet1 192.168.46         192.168.47.2       UGSc            0        0   
> tap0 192.168.47         link#10            UC              1        0   
> tap0 192.168.47.2       link#10            UHLWI           1        0   
> tap0

And this is with tap interfaces - I think it won't work.
Don't use bridge mode if you have two subnets of /24. I saw examples that it 
would work only if you make one subnet accessible to both: local network and 
vpn network. Change your configuration from bridged to routed or change your 
vpn addressing space.
If you'll go the routed way you may try this:
http://www.secure-computing.net/wiki/index.php/FreeBSD_OpenVPN_Server/Routed

-- 
Maciej Milewski