I am trying to set up my openvpn network but I have a problem.
My LAN configuration is as follows:
- main router Zyxel 192.168.1.1 acting as gateway (vdsl connection) and access point;
- openwrt router TD-W8970 192.168.1.2 acting as access point and vpn server (10.212.79.1)
What I want to do is to create a VPN network with clients that must send internet requests only through my LAN gateway (192.168.1.1); in other words, I want that the clients public IP shown on internet is the one of my LAN gateway (192.168.1.1) and not the one assigned to them by their ISP.
Here below my openvpn configuration.
user nobody group nogroup dev tun port 1194 proto udp server 10.212.79.0 255.255.255.0 topology subnet client-to-client keepalive 10 60 persist-tun persist-key verb 3 push "persist-tun" push "persist-key" push "dhcp-option DNS 18.104.22.168" push "dhcp-option DNS 22.214.171.124" push "route 192.168.1.0 255.255.255.0" ca /etc/easy-rsa/pki/ca.crt cert /etc/easy-rsa/pki/issued/server.crt key /etc/easy-rsa/pki/private/server.key dh /etc/easy-rsa/pki/dh.pem tls-auth /etc/easy-rsa/pki/ta.key 0
dev tun proto udp remote myserver_xyz.com 1194 udp resolv-retry infinite nobind user nobody group nogroup persist-key persist-tun ca ca.crt cert client1.crt key client1.key remote-cert-tls server tls-auth ta.key 1 cipher AES-256-CBC verb 3
The openvpn network is established correctly and the client 10.212.79.2 is able to ping vpn server 10.212.79.1 and navigate in Internet.
The problem is that the public client IP shown on Internet is the one assigned by its ISP and not the one of the LAN gateway (192.168.1.1) where the vpn server (192.168.1.2 / 10.212.79.1) is located.
I tried to perform some changes in server configuration but with no success.
I also tried to put push "redirect-gateway def1" or push "redirect-gateway autolocal" but in this cases the client stopped to navigate in internet at all.
If it is not an openvpn issue, is it an issue related to the correct configuration of IPTABLES?
Can you please help me?
Thanks in advance :)