Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to somehow force all IP traffic through our corporate OpenVPN server by just changing the client config?

share|improve this question

migrated from superuser.com Apr 10 '10 at 20:09

This question came from our site for computer enthusiasts and power users.

3 Answers 3

The redirect-gateway would do this, but the host that your VPN server is running on must be configured correctly to route your packets out onwards and return responses to you (i.e. if it is setup to do NAT for the VPN interface).

share|improve this answer

Once you log into the admin section there is a menu option called VPN settings. In there you can find different routing options:

alt text

share|improve this answer
    
Sorry but where can I find this admin section on the client? As mentioned in the question I don't want to change anything on the server. I'd just like to force an OpenVPN client to pass all traffic through the VPN. –  Marc Feb 23 '10 at 8:45
    
Oops - I didn't read the question carefully enough. That setting can only be changed on the server –  quickcel Feb 23 '10 at 13:51

No.

In order to make some guarantees about security, the server cannot trust the client. Everything is driven from the server. Imagine if your question was: "Can I change something on my browser so that I can view facebook from behind the corporate proxy?"

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.