按照本指南,我通过互联网成功configuration了一个到家庭networking的VPN连接。
目前的configuration是:
家庭networking (远程)
LAN: 192.168.1.1 => Router/Modem Gateway 192.168.1.20 => OpenVPN server (BananaPI device) on port 1194 192.168.1.40 => Other Device (with WebInterface) Services: The ISP has a Dynamic Public IP so in the Router a Dynamic DNS service is configured: my.domain.com points to the public IP Port Forwarding: - External Port 1194 is forwarded to Local 1194 for 192.168.1.20 (I can access the VPN server from internet at the address my.domain.com:1194)
客户端networking (本地)
192.168.1.1 => Router/Modem Gateway 192.168.1.2 => VPN Client (connects to my.domain.com:1194 and gets 10.8.0.6 Ip address)
有了这个configuration,我可以成功地连接到VPN,我有互联网接入,从我的客户端连接到VPN的时候,从http://whatsmyip.com报告的IP是Home Newtork的预期。 (显然)连接到VPN时,我还可以通过Internet从客户端networking访问192.168.1.40 Web界面。
唯一的问题是,如果我连接到VPN时访问192.168.1.1我得到客户端networking路由器的configurationWeb界面,而不是家庭networking 。
我该如何解决这个IP冲突?
从(Windows)客户端 ( 客户端networking上的192.168.1.2)
IPv4 route table =========================================================================== Active Route: Network Destination Mask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.3 20 0.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 20 10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 20 10.8.0.4 255.255.255.252 On-link 10.8.0.6 276 10.8.0.6 255.255.255.255 On-link 10.8.0.6 276 10.8.0.7 255.255.255.255 On-link 10.8.0.6 276 82.104.210.184 255.255.255.255 192.168.1.1 192.168.1.3 20 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 128.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 20 192.168.1.0 255.255.255.0 On-link 192.168.1.3 276 192.168.1.1 255.255.255.255 192.168.1.1 192.168.1.3 20 192.168.1.3 255.255.255.255 On-link 192.168.1.3 276 192.168.1.255 255.255.255.255 On-link 192.168.1.3 276 192.168.56.0 255.255.255.0 On-link 192.168.56.1 276 192.168.56.1 255.255.255.255 On-link 192.168.56.1 276 192.168.56.255 255.255.255.255 On-link 192.168.56.1 276 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 192.168.56.1 276 224.0.0.0 240.0.0.0 On-link 192.168.1.3 276 224.0.0.0 240.0.0.0 On-link 10.8.0.6 276 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 192.168.56.1 276 255.255.255.255 255.255.255.255 On-link 192.168.1.3 276 255.255.255.255 255.255.255.255 On-link 10.8.0.6 276
更改您的networking的IP地址scheme。
正如所build议的,如果真的那么重要的话,最好改变你的networking布局。 但是,应该可以将静态路由添加到远程路由器接口。
我不是100%熟悉添加路由的Windows语法,但在VPN客户端上,它应该是这样的:
route -p add 192.168.1.1 mask 255.255.255.255 <VPN-gateway-IP:10.8.0.1?>
或在Linux客户端上:
route add 192.168.1.1 netmask 255.255.255.255 gw <VPN-gateway-IP:10.8.0.1?>
或者类似的东西。 目标是设置一个静态路由到那个通过VPN而不是在本地路由的IP。 VPN网关可能需要额外configuration,以允许和路由到其本地192.168.0.0networking。