This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | |||
edgerouter:openvpn-roadwarrior [2017/09/18 15:38] – [EdgeRouter Configuration] brielle | edgerouter:openvpn-roadwarrior [2017/09/18 15:46] (current) – brielle | ||
---|---|---|---|
Line 15: | Line 15: | ||
On the EdgeRouter, make changes where appropriate. | On the EdgeRouter, make changes where appropriate. | ||
- | You can use NETMAP | + | You can use NAT rules to avoid having to change your LAN addressing scheme. |
< | < | ||
Line 61: | Line 61: | ||
pem key file contents here | pem key file contents here | ||
</ | </ | ||
+ | </ | ||
+ | |||
+ | ===== NAT Rules To Work Around Same Subnets On Both Ends ===== | ||
+ | If you have a subnet on your LAN side that is one of the common default ones on most consumer networks (like 192.168.0.0/ | ||
+ | |||
+ | Example: | ||
+ | < | ||
+ | Client Range: 10.10.10.0/ | ||
+ | NETMAP Range: 172.30.254.0/ | ||
+ | </ | ||
+ | |||
+ | The NETMAP range is the IP range that will be directly mapped to your LAN range and the range your clients will use to connect to devices on your LAN (aka, if your clients need to access 192.168.0.5, | ||
+ | |||
+ | < | ||
+ | set service nat rule 1000 description OpenVPN-Mobile-vtun0 | ||
+ | set service nat rule 1000 destination address 172.30.254.0/ | ||
+ | set service nat rule 1000 inbound-interface vtun0 | ||
+ | set service nat rule 1000 inside-address address 192.168.0.0/ | ||
+ | set service nat rule 1000 log disable | ||
+ | set service nat rule 1000 protocol all | ||
+ | set service nat rule 1000 type destination | ||
</ | </ |