On 27/12/2020 20:28, Chris Green wrote:
> Tauno Voipio  wrote:
>> On 27.12.20 20.04, Chris Green wrote:
>> If your OpenVPN machine is not the same as the incoming firewall/router,
>> you do need port forward from the outside to the OpenVPN machine. The
>> usual port is UDP/1194.
>>
>> You have also a need to provide routing from the internal network
>> to the OpenVPN daemon for the subnet (or host) to tunnel via the VPN.
>>
> Ay?  I'm not at all sure what you mean by this.

Here's your network

a) Router
b) OpenVPN server
c) Other local machine(s)

and

d) Remote machine

You need to set up your router so it forwards port UDP/1194 to the IP
address of OpenVPN server (b), as the OpenVPN client on (d) will connect
to the external (WAN) address of (a), and this traffic is handled by (b).

The OpenVPN server on (b) will assign a private subnet for the remote
devices which is different to your local network subnet. When OpenVPN
server is running on the router it will use DHCP to tell the other local
machines (c) to route this subnet through it. But if you are using a
separate OpenVPN server (b), you either need to manually add a route to
its DHCP table, or set up the routing on each the other machines (c) so
the remote subnet is routed via (b), rather than defaulting to the router.

That all seemed a lot easier to explain before I started writing this post!

---druck

--- SoupGate-Win32 v1.05