通过互联网对局域网进行VPN访问,本地和远程networking上的相同设备IP

按照本指南,我通过互联网成功configuration了一个到家庭networking的VPN连接。

目前的configuration是:

家庭networking (远程)

LAN: 192.168.1.1 => Router/Modem Gateway 192.168.1.20 => OpenVPN server (BananaPI device) on port 1194 192.168.1.40 => Other Device (with WebInterface) Services: The ISP has a Dynamic Public IP so in the Router a Dynamic DNS service is configured: my.domain.com points to the public IP Port Forwarding: - External Port 1194 is forwarded to Local 1194 for 192.168.1.20 (I can access the VPN server from internet at the address my.domain.com:1194) 

客户端networking (本地)

 192.168.1.1 => Router/Modem Gateway 192.168.1.2 => VPN Client (connects to my.domain.com:1194 and gets 10.8.0.6 Ip address) 

有了这个configuration,我可以成功地连接到VPN,我有互联网接入,从我的客户端连接到VPN的时候,从http://whatsmyip.com报告的IP是Home Newtork的预期。 (显然)连接到VPN时,我还可以通过Internet从客户端networking访问192.168.1.40 Web界面。

唯一的问题是,如果我连接到VPN时访问192.168.1.1我得到客户端networking路由器的configurationWeb界面,而不是家庭networking

我该如何解决这个IP冲突?

从(Windows)客户端客户端networking上的192.168.1.2)

 IPv4 route table =========================================================================== Active Route: Network Destination Mask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.3 20 0.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 20 10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 20 10.8.0.4 255.255.255.252 On-link 10.8.0.6 276 10.8.0.6 255.255.255.255 On-link 10.8.0.6 276 10.8.0.7 255.255.255.255 On-link 10.8.0.6 276 82.104.210.184 255.255.255.255 192.168.1.1 192.168.1.3 20 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 128.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 20 192.168.1.0 255.255.255.0 On-link 192.168.1.3 276 192.168.1.1 255.255.255.255 192.168.1.1 192.168.1.3 20 192.168.1.3 255.255.255.255 On-link 192.168.1.3 276 192.168.1.255 255.255.255.255 On-link 192.168.1.3 276 192.168.56.0 255.255.255.0 On-link 192.168.56.1 276 192.168.56.1 255.255.255.255 On-link 192.168.56.1 276 192.168.56.255 255.255.255.255 On-link 192.168.56.1 276 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 192.168.56.1 276 224.0.0.0 240.0.0.0 On-link 192.168.1.3 276 224.0.0.0 240.0.0.0 On-link 10.8.0.6 276 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 192.168.56.1 276 255.255.255.255 255.255.255.255 On-link 192.168.1.3 276 255.255.255.255 255.255.255.255 On-link 10.8.0.6 276 

更改您的networking的IP地址scheme。

正如所build议的,如果真的那么重要的话,最好改变你的networking布局。 但是,应该可以将静态路由添加到远程路由器接口。

我不是100%熟悉添加路由的Windows语法,但在VPN客户端上,它应该是这样的:

route -p add 192.168.1.1 mask 255.255.255.255 <VPN-gateway-IP:10.8.0.1?>

或在Linux客户端上:

route add 192.168.1.1 netmask 255.255.255.255 gw <VPN-gateway-IP:10.8.0.1?>

或者类似的东西。 目标是设置一个静态路由到那个通过VPN而不是在本地路由的IP。 VPN网关可能需要额外configuration,以允许和路由到其本地192.168.0.0networking。