Road Warrior logs into tap VPN, can't access the Internet anymore?

iflyforfun

Hey everyone,

I just installed pfSense for a client and configured OpenVPN using the bridging instructions here: http://doc.pfsense.org/index.php/OpenVPN_Bridging

The remote machine gets a LAN IP, can access all of the LAN resources, but can't get out to the Internet anymore. I'm assuming this could be fixed by setting the default route to the LAN's IP 192.168.1.1. However, I don't want to hard code that into his client for obvious reasons.

Is there a way to push a new DEFAULT route when the client connects? (I can see that it's already pushing a route to get to the 192.168.1.0 subnet)

The road warrior's machine is a MacOSX and he's connecting using the tunnelblick GUI.

Any help would be greatly appreciated!

Thanks,
Kevin

GruensFroeschli

I'm not sure if this works with a bridged setup.
You could use the command:
redirect-gateway def1

Hmmm.
Just read up a bit on the openVPN man-pages:
http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

It seems redirect-gateway def1 really doesnt work with a bridge.
But you have to option to use
push "route-gateway x.x.x.x"

iflyforfun

@GruensFroeschli:

I'm not sure if this works with a bridged setup.
You could use the command:
redirect-gateway def1

Hmmm.
Just read up a bit on the openVPN man-pages:
http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

It seems redirect-gateway def1 really doesnt work with a bridge.
But you have to option to use
push "route-gateway x.x.x.x"

Thanks, I'll try the push "route-gateway x.x.x.x". I should just add it to the "extra options" area on the OpenVPN page?

I'll let you know if it works.