Openvpn – Access computer on LAN behind OpenVPN server

openvpntp-link

I have a TP-Link VR400 Archer router on which I want to enable the OpenVPN server, so that a remote user can connect to the network and access a specific computer on the internal LAN. The router has an address of 192.168.0.99, subnet mask 255.255.255.0, and has a DHCP server running, handing out addresses in the range 192.168.0.100-192.168.0.150. The default settings for the OpenVPN configuration on the router's web interface are a VPN Subnet of 10.8.0.0 and Netmask of 255.255.255.0.

If I go with that, I assume it means that when I connect via an OpenVPN client from the remote computer, that remote computer will be seen as within subnet 10.8.0.0 and will therefore not be able to talk to the particular computer in question which it needs to, namely 192.168.0.10. How do I allow it to do so? I have heard about something called static routing, so I'm wondering whether that might be the answer?

The TP-Link router does allow me to set up a PPTP VPN instead, with a constrained IP range. It defaults to suggesting 10.7.0.11 – 10.7.0.20, but might it be possible to change that to something like 192.168.0.151 – 192.168.0.160, i.e., within the same subnet as the local computers but with no possibility of a clash?

Best Answer

Selecting 'Internet and Home Network' does indeed work as I had hoped. I enabled the OpenVPN server on the router with this setting, and connected to it from a remote OpenVPN client, which had been assigned the IP address 10.8.0.6. Although there is a machine on the remote client's LAN with the IP address 192.168.0.1, it does in fact connect correctly to the server with the IP address 192.168.0.1 on the LAN behind the OpenVPN server.

Related Topic