Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need configure my openvpn server to provide some LAN resources, but I don't want route all traffic for my clients.

Here is my sample network description: My LAN is 192.168.1.0/24. Openvpn network is 192.168.100.0/24. I add push route 192.168.1.0 255.255.255.0 in my server side configuration. I would like to allow my clients can access 192.168.1.0/24, but not other traffic.

How can I do this from server side configuration? Is client side configuration the only way to do this?

share|improve this question

2 Answers 2

up vote 3 down vote accepted

Simply do not add the redirect-gateway in the client or server configuration and the default gateway will not be changed.

share|improve this answer
    
There is no redirect-gateway in server configuration. Maybe I missed something? –  Solomon Jul 16 '12 at 16:32
1  
Did you check on the client side as well? The option can be set on either side. Watch your OpenVPN log on the client when the connection is being established. You should see messages about the gateway being switched, and if the option was pushed from the server or not. –  Zoredache Jul 16 '12 at 16:33
    
I use NetworkManager for convenience and get confusion. It works with new client side configuration and without NetworkManager. Thanks. –  Solomon Jul 16 '12 at 16:57

In NetworkManager: Edit Connections -> VPN -> (select the vpn configuration you would like to edit) -> Edit -> Routes -> Check the box that says "Use this connection only for resources on its network"

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.