tiagozappa
hi,
First .. Sorry any problem with my english...
I Have this situation:
Server01 (Lan Matriz)
eth0 -> out to internet
eth1 192.168.0.3 -> local network
tap0 10.0.0.1 -> Interface created by OpenVPN
Matriz's Network 192.168.0.0/24
This server is the network gateway to all machines insite "Matriz". And besides, Here is installed OpenVPN Server.
Client (Lan "Filial")
eth0 -> out to internet
eth2 192.168.1.9 -> local Network
tap0 10.0.0.4 -> Interface created by OpenVPN
Filial's Network 192.168.1.0/24
This server is the network gateway to all machines insite "Filial". And besides, Here is installed OpenVPN.
PS: Doesn't have eth1
What is working:
The VPN Connection is working
The vpn connection is successfully established.
In Client
I can ping all hosts in Matriz's Network (192.168.0.1/24) and I can ping the interface tap0 of Server (10.0.0.1)
MATRIZ's Network (Server)
I can ping the interface top0 of client (10.0.0.4)
I can ping the ip 192.168.1.9 (ip of internal interface of Client)
What doesn't work!!!!!
From Matriz (192.168.0.0/24), i can't ping any ip inside the Filial's Network (192.168.1.0/24), the only ip that I can ping, is the ip 192.168.1.9, that is the ip address of internal interface of filial.
I need the network of the Matriz(192.168.0.0/24) can ping all machines on the Filial's Network (192.168.1.0/24).
Routers:
Server (Matriz)
Destino Roteador MáscaraGen. Opções Métrica Ref Uso Iface
0.0.0.0 172.0.0.1 0.0.0.0 UG 1 0 0 eth0
10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 eth1
172.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 <---- local network
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0 <---- Filial's Network
Client (Filial)
0.0.0.0 172.0.1.1 0.0.0.0 UG 1 0 0 eth0
10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
172.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.0.0 10.0.0.1 255.255.255.0 UG 0 0 0 tap0 <------ Matriz's Lan
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2 <------- local network
Someone can help me????
Mimiko
tiagozappa
Thanks,
But, I think that link, isn't my case...
Because my OpenVPN is the LAN's GW .. (server and cliente)...
and I need lan client ping lan server, and lan server ping lan client.
Today the lan client ping all host of lan server, but lan server doesn't ping host of lan client, only ping the server.
I did de ccd but, didn't work neither. 🙁
My server conf:
#server.conf
dev tap
port 1194
proto udp
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist /etc/openvpn/ipp.txt
client-config-dir ccd
tls-server
dh /etc/openvpn/keys/dh512.pem
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/Matriz.crt
key /etc/openvpn/keys/Matriz.key
push "route 192.168.0.0 255.255.255.0"
route 192.168.1.0 255.255.255.0
max-clients 10
comp-lzo
keepalive 10 120
persist-tun
persist-key
#logs e stats
log-append /var/log/openvpn.log
status /var/log/openvpn.stats
verb 6
#ccd file
iroute 192.168.1.0 255.255.255.0
My client conf
#client.conf
remote xxx.xxx.xxx.xxx
float
port 1194
dev tap
comp-lzo
keepalive 5 30
persist-key
tls-client
client
pull
dh /etc/openvpn/keys/dh512.pem
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/prime.crt
key /etc/openvpn/keys/prime.key
verb 3
log-append /var/log/openvpn.log
Am I did something wrong?
Mimiko
Did you verified iptable rules on both client and server? Is your client the 192.168.1.0's LAN default GW?
