OpenVPN RoadWarrior Bridged mode woes

Support
, ,
1

I’ve been trying to setup a vpn that has access to lan. I want access to samba, printing, and to be able to play lan games over the vpn. However I do not want the vpn clients to use the vpn as an internet gateway. At first I setup the vpn in Routed mode witch i quickly learned was a mistake.
So I goto set OpenVPN RoadWarrior in Bridged mode.

Current Issue:
Clients have No internet access when connected to VPN
VPN clients can resolve DNS but can’t ping resolved internet IP

What is working:
VPN Clients have access to lan and can ping all lan ip addresses

config show openvpn@host-to-net

openvpn@host-to-net=service
AuthMode=certificate
BridgeEndIP=10.16.2.254
BridgeName=br0
BridgeStartIP=10.16.2.201
Cipher=
ClientToClient=enabled
Compression=disabled
CustomRoutes=
Digest=
Mode=bridged
Netmask=255.255.255.0
Network=10.16.0.0 <----- I know this is wrong but i dont know where the file is to edit (Fixed)
PushDns=
PushDomain=
PushExtraRoutes=enabled
PushNbdd=
ushWins=
Remote=
RouteToVPN=disabled
TapInterface=tap0
TlsVersionMin=
UDPPort=1194
access=green,red
status=enabled

db networks show
br0=bridge
bootproto=none
gateway=10.16.2.1
ipaddr=10.16.2.1
netmask=255.255.255.0
role=green
enp6s0=ethernet
FwInBandwidth=
FwOutBandwidth=
bootproto=none
gateway=99.165.8.118
ipaddr=99.165.8.113
netmask=255.255.255.128
role=red
enp7s0=ethernet
FwInBandwidth=
FwOutBandwidth=
bootproto=none
bridge=br0
role=bridged
enp8s0=ethernet
role=
enp9s0=ethernet
FwInBandwidth=
FwOutBandwidth=
role=
ppp0=xdsl-disabled
AuthType=auto
FwInBandwidth=
FwOutBandwidth=
Password=
name=PPPoE
provider=xDSL provider
role=red
user=
red1=provider
interface=enp6s0
weight=1

3

Can’t you just update that directly with “config setprop”.

Cheers.

4

Such configuration has no effect if the OpenVPN is set in bridged mode.
In bridged mode, the client will take an address from the green network.

5

Thanks I wasn’t sure it that setting was interfering with something

6

Sorry it took me so long to get back here my account was on hold.
I mannaged to get access to lan and ping all the lan clients from a vpn client. However non of the vpn client have internet access. DNS is working. I can resolve a domain but I get a time out when I ping anything on the internet.
To me it looks like a routing issue but shouldn’t openvpn default internet traffic to the vpn client’s gateway?
If that’s not the default configuration in Nethserver how can I change it?