Configuring tun openvpn to route/assign ip from lan subnet

[ColinTaylor]

I think this is wrong:

-A POSTROUTING -s 10.8.0.2/32 -o br0:0 -j SNAT --to-source 192.168.1.241

The command should be:

iptables -t nat -I POSTROUTING -s 10.8.0.2 -o br0 -j SNAT --to 192.168.1.241

 

[stretch]

I think this is wrong:

-A POSTROUTING -s 10.8.0.2/32 -o br0:0 -j SNAT --to-source 192.168.1.241

The command should be:

iptables -t nat -I POSTROUTING -s 10.8.0.2 -o br0 -j SNAT --to 192.168.1.241

Tried that as well and it didn't work either, i'll look again tomorrow hen less tired as you say it works for you.

So you add the extra br0:0 interface connect your vpn client after you add the iptables rule does your ping time go up?

 

[ColinTaylor]

So you add the extra br0:0 interface connect your vpn client after you add the iptables rule does your ping time go up?

Not to the br0:0 address. As you said, it's because it's on the router. For the ping to increase you would still have to ping an address on the other side of the tunnel, e.g. 10.8.0.2.