Hello,Thanks again.My client is Windows OS.In my local network, the DNS server IP address is "172.20.1.2". My OpenVPN server can ping my internal network: # ping 172.20.1.18PING 172.20.1.18 (172.20.1.18) 56(84) bytes of data.64 bytes from 172.20.1.18: icmp_seq=1 ttl=63 time=1.10 ms64 bytes from 172.20.1.18: icmp_seq=2 ttl=63 time=0.954 ms64 bytes from 172.20.1.18: icmp_seq=3 ttl=63 time=1.21 ms^C--- 172.20.1.18 ping statistics ---3 packets transmitted, 3 received, 0% packet loss, time 2054msrtt min/avg/max/mdev = 0.954/1.089/1.214/0.106 ms
I added the following lines to the server configuration file: push "redirect-gateway def1 bypass-dhcp"route 172.20.1.0 255.255.0.0push "route 172.20.1.0 255.255.0.0"push "dhcp-option DNS 172.20.1.2" And added the following line to the client.ovpn file: route add 172.20.1.0 255.255.0.0 When I connected to the OpenVPN server, then I got the following message: https://pastebin.mozilla.org/UKg0BTbG But, I can't ping the internal network: C:\>ping 172.20.1.18 Pinging 172.20.1.18 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out. Ping statistics for 172.20.1.18: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), C:\> What is the problem? On Sun, Jul 30, 2023 at 6:16 PM, Jochen Bern<jochen.b...@binect.de> wrote: On 30.07.23 12:54, Jason Long via Openvpn-users wrote: > On Sunday, July 30, 2023 at 02:12:06 PM GMT+3:30, Gert Doering > <g...@greenie.muc.de> wrote: > On Sun, Jul 30, 2023 at 10:09:33AM +0000, Jason Long via Openvpn-users wrote: >> 172.20.1.0 via 10.8.0.0 device tun >> 172.20.50.0 via 10.8.0.0 device tun >> >> Wherever that came from, it's not a valid OpenVPN syntax. >> (It looks like arguments to "ip route add ...") I'm pretty sure that /sbin/ip will not know of an interface called "tun", either. (It might insist on being explicitly told what subnet mask to use, too.) > Can you tell me how can I correct it? "Valid syntaxes: route network/IP route network/IP netmask route network/IP netmask gateway route network/IP netmask gateway metric" -- https://openvpn.net/community-resources/reference-manual-for-openvpn-2-6/#client-options Not that your client would *need* those routes configured, as the server is already set up (with proper syntax) to "push" them to all clients. Kind regards, -- Jochen Bern Systemingenieur Binect GmbH _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
