help with static routes vpn

Code:
ifconfig_vtnet0="inet 192.168.1.100 netmask 255.255.255.0"
defaultrouter="192.168.1.99"
#openvpn
openvpn_enable="YES"
openvpn_if="tap"            # driver(s) to load, set to "tun", "tap" or "tun tap"
openvpn_configfile="/usr/local/etc/openvpn/openvpn.conf"
#test route to 192
firewall_enable="YES"
firewall_type="open"
natd_enable="YES"
natd_interface="vtnet0"
natd_flags="-dynamic -m"
pf_enable="YES"
static_routes="vpn"
route_vpn="-net 192.168.1.0/24  10.1.1.1"

All works great ! Clients are connecting to the vpn server, getting ip 10.1.1.X and can access devices in 192.168.X network

What rule should I enter in rc.conf they can access devices in 192.168.50.X network?
Both networks are physical same, they are logically separated.
I try with different options
adding:
static_routes="vpn50"
route_vpn50="-net 192.168.50.0/24 10.1.1.1"
or
route_vpn50="-host 192.168.50.100 -iface vtnet0"

or
static_routes="vpn"
route_vpn="-net 192.168.1.0/24 192.168.50.0/24 10.1.1.1"
but neither with success.

Should I change something in openvpn.conf?
Now I have
Code:
ifconfig 10.1.1.1 255.255.255.0
ifconfig-pool 10.1.1.11 10.1.1.50 255.255.255.0
push "route-gateway 10.1.1.1"
push "route 192.168.1.0 255.255.255.0"

So the how clients with 10.1.1.X network access both 192.168 .10 and .50 devices?

Thanks in advance !
 
You should have such option in openvpn.conf
Code:
push "route 192.168.50.0 255.255.255.0"
If your server already has access to network 192.168.50.0/24, so, you don't need to add additional route. If not - you must add it.
You must remove next lines from /etc/rc.conf:
Code:
static_routes="vpn"
route_vpn="-net 192.168.1.0/24  10.1.1.1"
because your vtnet0 already knows about this net. If it's a mistake, you should replace it with:
Code:
static_routes="vpn"
route_vpn="-net 192.168.50.0/24  10.1.1.1"
 
Back
Top