chuanse
Hello,
I am trying to get a virtual appliance up and running, but i'm not getting there :/
This isn't my first ovpn server setup and I'm not a newbie in debian.
What I am not: a network specialist and in this case I could use some help.
So we have this complex datacenter with all kinds of servers/esx/vdi/vlan's/.... at our university.
To get inside the need for a ovpn server arises. I will buy like at least 50 client licenses if i get it working...
x.x.27.15 would be the external internet address which goes to a firewall. The fw should NAT this ip to 10.15.2.185/24
So eth0 config:
auto eth0
iface eth0 inet static
address 10.15.2.185
netmask 255.255.255.0
gateway 10.15.2.4 => I suppose this is the inside ip of the firewall, just following orders from the network guys here
dns-domain some.network.domain => our university internet domain
dns-nameservers x.x.250.7 x.x.15.14 => these are internet dns server, like i would say 8.8.8.8 and 8.8.4.4 of google dns
then eth1:
auto eth1
iface eth1 inet static
address 192.168.251.185
netmask 255.255.255.0
gateway 192.168.251.1
dns-domain inside.net => AD domain
dns-nameservers 10.10.2.100 10.10.2.101
=> now this side works, i can connect ssh from a vmware vdi desktop (so inside the lan) to this address of eth1
I am not able to connect from the outside world ssh nor https, using the external internet ip address.
I was fidling around with the setting in the openvpnas and on a moment, I was able to connect from the outside, but then the inside connection timed out. I think this means that the network guyz did tell me the truth when stating the external ip address was NAT'ed to 10.15.2.185 in DMZ without a restriction.
I am sure I need to get the configuration right on the openvpnas right and the rest of the network is ok, but what and where...?
Is there anybody out there who can help me out and tell me what to do?
systcl has ipv4 forward enabled btw...
John
