Answers to: openVPN on debian Lennyhttp://linuxexchange.org/questions/1341/openvpn-on-debian-lenny<p>Hi. I'm setting up a VPN with openVPN on a debian lenny server. I successfully installed it in the server, then created the certificates and both client (winXP) and server config files. For the client I use openVPN gui. I tested the tunnel and everything went just fine. I even can ping the openVPN server from the XP client. But that´s all. I can't ping any machine behind the openvpn server. Some facts that you may find useful to help me with this issue are:</p> <ul> <li>The openVPN server is not the default gateway of the LAN. The dg is a pfsense server</li> <li>I don´t have iptables enabled (policy of all chains are ACCEPT).</li> <li>I have configured ip forwarding (echo "1" >/proc/sys/net/ipv4/ip_forward)</li> <li>I my server.conf I have the line: push route "192.168.1.0 255.255.255.0")</li> <li>My openVPN server has two NIC's. One connected to the LAN, and the other to the WAN. I have checked and all seems to be OK. I think that the problem is connected with routing the traffic from the vpn to my LAN but I don't know how to do that (besides the push route line in the server.conf).</li> </ul> <p>I Hope you can help me! Thanks!</p>enTue, 02 Aug 2011 08:15:03 -0400Answer by chrisjrobhttp://linuxexchange.org/questions/1341/openvpn-on-debian-lenny/2649<p>If the gateway is not the default route, then every machine behind the server will need a route back.</p> <p>On one of the machines to which you are trying to connect, create a route:</p> <p>route add -net 10.207.40.0 netmask 255.255.255.0 gw 192.168.0.1 up</p> <p>Where 10.207.40.0 is the OpenVPN subnet allocated by your OpenVPN server and 192.168.0.1 is the LAN address of your openvpn server.</p>chrisjrobTue, 02 Aug 2011 08:15:03 -0400http://linuxexchange.org/questions/1341/openvpn-on-debian-lenny/2649