0

I have a router with IP 192.168.1.1 subnetting 192.168.1.0/24.

On that subnet, a synology nas has an IP of 192.168.1.181 and is running a VPN server using subnet 192.168.2.0/24.

When I connect a client to that server from outside both networks, I get assigned 192.168.2.6. From that client I can ping machines on 192.168.1.0 (192.168.1.17 for example) and 192.168.1.1 & 192.168.2.1.

From machines already on 192.168.1.0, I cannot ping the VPN clients.

I would like to have two-way access across both subnets. What do I need to do?

  • 1
    Add a route to 192.168.2.0/24 via the Synology NAS (192.168.1.181). – Cristian Ciupitu Aug 10 '15 at 16:23
3

Your clients need a route to 192.168.2.0/24 (the network being used by your vpn clients). The easiest way to do this is to ensure that the default gateway for your network (192.168.1.1) knows you to reach that network, possibly by setting up a static route to 192.168.2.0/24 via your OpenVPN server. How to do this depends on your router; on Linux, that would look something like:

ip route add 192.168.2.0/24 via 192.168.1.181

Alternatively, you can give each of your clients a static route to this network.

You will also need to ensure that our OpenVPN server is configured to route traffic between these networks (e.g., making sure that your firewall is configured to permit forwarded traffic from your 192.168.1.0/24 network to the VPN network).

  • Tried route add 192.168.2.0 255.255.255.0 192.168.1.181 and got: C:\WINDOWS\system32\ROUTE.EXE: bad argument 192.168.1.181 | Also I have this exact route in my 192.168.1.1 router. – Enigma Aug 9 '15 at 20:15
  • I have no idea what the appropriate Windows command line would look like. I would start with route /? and Google, I guess. – larsks Aug 9 '15 at 20:15
  • I was using technet.microsoft.com/en-us/library/… – Enigma Aug 9 '15 at 20:16
  • Oops didn't specify arguments – Enigma Aug 9 '15 at 20:16
  • 1
    I'm not certain that you're going to be able to achieve your desired state by using the options available in the Synology GUI. It looks like many of the options that are available when you configure OpenVPN through the use of config files are simply not available in Synology. – austinian Aug 9 '15 at 20:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.