TomatoUSB

I'm wondering if any gurus here can guide me in the following setup.

PC     --via OpenVPN-->   Site1

                            |
                            |
                       via OpenVPN
                            |
                            |
                            V

                          Site2

PC       192.168.43.1/24
Site1    192.168.2.0/25 (OpenVPN Server 10.8.124.0/28)
Site2    192.168.1.0/24 (OpenVPN Server 10.8.60.0/28)

I'm trying to access Site2 from my PC which is connected to Site1 via OpenVPN. What OpenVPN parameters do I need to push from Site1 OpenVPN server settings to PC so that PC can access 192.168.1.0/24 in Site2?

I have tried pushing the following from Site1 OpenVPN server but PC is still not able to access Site2.

push "route 192.168.1.0 255.255.255.0"

So how should PC's route for 192.168.2.0/24 be configured if it is possible?

ps. LAN connected clients in Site1 can connect to Site2 just fine. Only OpenVPN connected clients on Site1 cannot access Site2.

I followed this tutorial and was able to successfully set up a site to site VPN.

http://www.wasagacomputers.com/home/2010/8/10/tutorial-site-to-site-vpn-using-tomato-firmware-and-openvpn.html

Regarding your specific issue, note the third screenshot in the tutorial. Make sure the "Allow Client<->Client" is checked and that the Common Name ("homelan" in the tutorial) matches what you have setup.

I'm not sure of what I'm saying but from what I have read up about the client-to-client option, it enables OpenVPN clients to see each other when they are connected to the same OpenVPN server.

My scenario is different in that PC is a client of Site1 while Site1 is client of Site2.

Note that all connected devices on LAN of Site1 can access Site2 clients just fine. Only the OpenVPN client of Site1 cannot reach Site2.

Fixed this finally.

Solution was to add the iroute command to Site1's client config on Site2's server settings.

So in Site2, look for Site1's client config and add the following to it. Restart Site2's server and reconnect from Site1.

iroute 192.168.2.0 255.255.255.0

Remember to also push route from Site1's server to PC so PC is instructed to send Site2's packets via Site1. Add the following to Site1's server config.

push "route 192.168.1.0 255.255.255.0"

Now, PC can access and ping clients in Site2's subnet 192.168.1.0/24.

The link below is no longer available, and I even can not find it use the wayback machine. Anybody has a copy archived?

http://www.wasagacomputers.com/home/2010/8/10/tutorial-site-to-site-vpn-using-tomato-firmware-and-openvpn.html