OpenVPN NAT behind router LAN interface

[Wicked]

Hi - hope someone can help!

I have an ASUS RT-N66U flashed to Merlin Build 374.43

Asus Router has an OpenVPN client configured to create an outbound connection to my OpenVPN server (TAP). This works fine.

My OpenVPN server can ping devices on the LAN behind the router - so this works fine as well.

My problem is that I need the devices on the LAN behind the ASUS to see the inbound traffic originating from the LAN address of the ASUS, rather than from the tunnel address.

Is there any client config I can add to achieve this behaviour ?

Any help much appreciated. Thanks. Dave.

 

[sinshiva]

http://www.smallnetbuilder.com/secu...how-to-set-up-a-site-to-site-vpn-with-openvpn

 

[Wicked]

NAT behind router's LAN address

Thanks - but that link doesn't help. My VPN already works OK - I just need the traffic that is sent from the OpenVPN server to a device on the LAN behind the client router to be NAT so it appears to originate from the router's LAN address.

The reason for this is I have devices on the LAN which can only have a Default Gateway, and you cannot set a static route on them. My OpeVPN server is also a network management station, so needs to appear to the devices that it is on the same subnet - hence why I need to NAT the inbound traffic behind the router's LAN address.

 

[sinshiva]

sorry, your router is functioning as a vpn client bridge, with tap. the server would need to be reconfigured with tun