On Saturday 14 Feb 2015 03:51:12 Joseph wrote: > On 02/13/15 20:44, Joseph wrote: > >On 02/13/15 22:17, Michael Orlitzky wrote: > >>On 02/13/2015 09:50 PM, Joseph wrote: > >>> I have a hard time finding any documentation on how to print over VPN. > >>> > >>> I have a network printer and I would like to setup my laptop to print > >>> to it over VPN. The remote VPN IP address is: 192.168.151.1 > >>> The printer IP is: socket://10.0.0.105 > >>> and lpd://10.0.0.106/BINARY_P1 > >>> > >>> I think I need some entries in VPN config files isn't it? > >> > >>Does the VPN server also have a 10.0.0.x address? If so, you just need > >>to tell the VPN clients that they can reach the 10.0.0.x network via the > >>VPN, i.e. by routing through your VPN server. > >> > >>We have pretty much the same setup, with our VPN server sitting on > >>10.1.1.1 with some other private IP address. This is the client config > >> > >>for the OpenVPN server: > >> # cat /etc/openvpn/client-config/DEFAULT > >> push "route 10.1.1.0 255.255.255.0" > >> > >>Then you point to that in openvpn.conf (also on the server): > >> # grep client-config /etc/openvpn/openvpn.conf > >> client-config-dir client-config > >> > >>After that, any new client connections will just know that 10.1.1.x can > >>be reached over the VPN. > > > >Thank for replying. > > > >My eeepc VPN IP: 192.168.151.9 is the client connected over VPN to server > >VPN IP 192.168.151.1 > > > >So I inserted on eeepc (client) to /etc/openvpn/eeepc.conf > >... > > > > push "route 192.168.151.0 255.255.255.0" > > > >On a server 192.168.151.1 I have file: > >/etc/openvpn/server.conf > >/etc/openvpn/ccd/eeepc > > > >in /etc/openvpn/ccd/eeepc is: > >ifconfig-push 192.168.151.9 255.255.255.0 > > > >Do I add to "eeepc" > >client-config-dir ??? > > > >Which file on a server do I modify? > > One more question. > > Do I modify on a client eeepc file: > > /etc/cups/client.conf > > and add: > ServerName 192.168.151.1:631
DISCLAIMER: I don't use OpenVPN, but IKE/IPSec. In any case, similar routing principles apply. Your printer is on a different subnet than your laptop. Therefore, unless you have set up routing in your VPN gateway from 192.168.151.0/24 to 10.0.0.0/24 I don't think you will be able to connect to the printer. In addition, follow the example that Michael has suggested above on your laptop to be able to route packets in it to 10.0.0.0/24 via the openvpn gateway. If you want to *only* allow connections to the printer, but not other devices within the 10.0.0.0/24 subnet, then adjust the route declarations for 10.0.0.106/32. HTH. -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.
