ASUS Router to Router OpenVPN - need routing assistance - RESOLVED

[tigerdog]

I am not sure whether this post belongs in the ASUS-merlin subforum or the VPN. I put the same post in the wrt-merlin subform., so moderators please delete or link posts as is in compliance with forum rules.

I have successfully set up an OpenVPN client from an AC68U client to an AC87U server, both running 380.69. Everything works as expected - AC68U LAN devices can access devices on the AC87U's LAN. I am forced to create the VPN in this direction because the AC68U is behind a double-NAT.

HOWEVER: i need the routing relationship to be reversed. I need devices on the AC87U LAN to be able to access the AC68U's LAN. I do not want any access from the 68 site to come back to the 87.

Is there any way to initiate the VPN from a client, but have the routing set up as if the roles are reversed?

Thanks in advance for any suggestions.

 

[tigerdog]

I've been digging further into it. I'm thinking if I set "push LAN to clients" to "no" on the server side, it will prevent the 68 from being able to route to devices on the 87. From there, I could add push "route 192.168.227.250 255.255.255.255" on the 87 server, so devices on the 68 LAN can still reach the one device I want them to know about.

What I can't figure out is how to add routing in the opposite direction. How can I tell the 87 to route through the tunnel to reach devices on the 68's LAN?

 

[tigerdog]

Thanks to assistance from member Martineau, the setup now works as I need. Details here, if it helps anyone in the future:
https://www.snbforums.com/threads/o...verse-routing-relationship.43189/#post-369871