OpenVPN problems

Okay, here's the situation:

I have a three-legged firewall. fxp0 is the external interface with IP
1.2.3.4. fxp1 is the internal interface to my client network, it has
IP 10.0.0.1. sis0 is the interface to the server I want to access
securely via my laptop from, e.g., campus. It has IP address
192.168.0.1. I want to configure OpenVPN to use 172.160.0.0/16 as IPs,
to that end, I did

route add 172.16.0.0/16 192.168.0.1

so the traffic can route to the server.

Below I have the output of the various configuration files, please
advise if I've made any mistakes. As always, any help would be
appreciated.

/etc/bridgename.bridge0:

add fxp1
add tun0
up

/etc/openvpn/server.conf :


port 1194
proto udp
dev tun0
dev-type tap
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 172.16.0.1 255.255.255.0 172.16.0.2 172.16.0.254
push "route 192.168.0.0 255.255.255.0"
client-to-client
keepalive 10 120
cipher BF-CBC # Blowfish (default)
comp-lzo
user _openvpn
group _openvpn
daemon openvpn
writepid /var/openvpn/pid
persist-key
persist-tun
status openvpn-status.log
verb 4
mute 20
chroot /var/empty

/var/log/daemon

If anyone needs to see anything else, I'll post it, but please advise
if there's anything obviously wrong here.

.

Relevant Pages

  • Re: Apache Not Responding When Being Accessed From Outside Local Network
    ... your network or client network is pppoe, ... And also I do have a eri interface on the box i'm using. ... Thank you so very very much for spotting that Leach. ...
    (comp.unix.solaris)
  • Re: Cant send packets via WiFi (possibly route issue)
    ... I think that this WiFi device should route all ... it should *all* be routed to the eth1 interface. ... Wireless is much like a point-to-point link using ... The connection between the two networks is the "Wifi AP". ...
    (comp.os.linux.networking)
  • RE: Running public IPs inside an RFC 1597 network
    ... > I'm running a typical Class C RFC 1597 network in my lab. ... know or care if we humans designate a subnet as public or private. ... is the absolute most general route there is for a machine. ... In a correctly configured system when you define an interface, ...
    (freebsd-questions)
  • Equal cost paths from separate OSPF Processes
    ... the network statements are valid in all OSPF processes. ... interface Serial0.300 point-to-point ... router#sh ip route ospf ... connected, includes subnets in redistribution ...
    (comp.dcom.sys.cisco)
  • Re: panic in rt_check_fib()
    ... It dropped a the lock on one route while it went off an did something ... then brings up the wired interface of my laptop. ... echo '## Bringing up network interface.' ... With your version of rt_check_fibI have no panics so far. ...
    (freebsd-current)