Skip to content

Instantly share code, notes, and snippets.

@demofly
Forked from psychov/gist:9b701ee2f5a77fe03590
Last active August 29, 2015 14:16
Show Gist options
  • Save demofly/9d20267285267b521afa to your computer and use it in GitHub Desktop.
Save demofly/9d20267285267b521afa to your computer and use it in GitHub Desktop.
Site-to-Site OpenVPN routing
1. Server
89…. White public
192.168.1.1(/24)
[psychov@home openvpn]$ cat openvpn.conf
dev tun
ifconfig 10.1.0.1 10.1.0.2
script-security 2
up ./openvpn.up
push "route 192.168.1.0 255.255.255.0"
secret static.key
comp-lzo
persist-tun
persist-key
verb 3
log-append /opt/var/log/openvpn/openvpn.log
keepalive 10 60
2. Client
10.190.232.50 GW:10.64.64.66 (3G Megafon)
192.168.3.1(/24)
client
dev tun
proto udp
remote home.sychov.com 5190
resolv-retry infinite
nobind
persist-key
persist-tun
ca /Users/psychov/Documents/sverdlovsky.tblk/ca.crt
cert /Users/psychov/Documents/sverdlovsky.tblk/sverdlovsky.crt
key /Users/psychov/Documents/sverdlovsky.tblk/sverdlovsky.key
ns-cert-type server
comp-lzo
verb 3
#log-append /opt/var/log/openvpn/openvpn.log
#status /opt/var/log/openvpn/status.log
/ # route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 10.64.64.66 0.0.0.0 UG 1 0 0 ppp2
10.64.64.66 * 255.255.255.255 UH 0 0 0 ppp2
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
192.168.3.0 * 255.255.255.0 U 0 0 0 br0
192.168.255.0 192.168.255.9 255.255.255.0 UG 0 0 0 tun0
192.168.255.9 * 255.255.255.255 UH 0 0 0 tun0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment