1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Tomato OpenVPN client and "push" directive

Discussion in 'Tomato Firmware' started by mikepelley, Jun 8, 2010.

  1. mikepelley

    mikepelley Networkin' Nut Member

    Hello,

    I'm using the Tomato OpenVPN firmware and it is mostly working well - thanks!

    I'll try to be brief here - let me know if you need more details. I have a home office behind a Tomato server. Before, everything in the home was NAT'd to the internet through Tomato. The goal is to give all computers in the home access to one subnet at the office. All other traffic should be routed to the internet as before (i.e. through NAT).

    I configured the OpenVPN client on Tomato to connect to an OpenVPN server at the office. After testing the link, I manually added a route for an office subnet to Tomato. Success! Traffic destined for the office is routed over the link, and all other traffic is going to the Internet via NAT.

    Eventually, I expect to have several of these Tomato clients out there, and I have several office subnets to add. To centralize the configuration, I'd like to remove the custom route(s) from the Tomato configuration, and instead use the "push" directive on my server to push out the routes. This is the first time I've done this with OpenVPN, but my understanding was that the client should add the route to the local routing table once the VPN is connected.

    Unfortunately, Tomato seems to ignore this push directive. Is this a known problem, or have I misunderstood something?

    Thanks,
    Mike.
     
  2. SgtPepperKSU

    SgtPepperKSU Network Guru Member

    The OpenVPN support in TomatoVPN (and other Tomato mods that include it) definitely does not ignore the push directive. However, OpenVPN in general only supports it for TLS authentication, not static key. Are you using TLS?
     
  3. mikepelley

    mikepelley Networkin' Nut Member

    I am using static keys - sounds like that might be the problem. It's a very minor issue as my configuration will not be changing much, but I was curious. Thanks for the info!
     

Share This Page