Openvpn – How to let an openvpn client access to another client’s subnet

openvpn

My network topology:

enter image description here

Sorry to ask again here, I'v post this question in StackOverflow:

https://stackoverflow.com/questions/45047558/how-to-let-an-openvpn-client-access-to-another-clients-subnet

The system informed me to post here.

I want all clients in OpenVPN network 10.8.0.0/24 can access to a subnet behind 10.8.0.3

I don't want to do any manully configurations in OpenVPN clients other than 10.8.0.3

I googled lots of solutions, but can't find one meet my demand.

I know it's not easy, so I'm willing to pay for your solution.

Please help, thank you.

Best Answer

You would maybe be able to accomplish this if you can change the client on 10.8.0.3 to a server install of PFsense. Then you could do a site-to-site OpenVPN tunnel. This should allow you to get the routes in place for both ends of that tunnel.

You would also have to add a route on 192.168.1.1 pointing the networks that need a route back towards the next hop 192.168.1.2.

https://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/site-to-site-layer-3-routin-using-openvpn-access-server/