HI All,
I'm glad to find this place for OpenVPN, I'm currently creating an site to site VPN environment, and run into questions...
Branch A:
192.168.10.0/24 and Static PublicIP 1.2.x.4
OpenVPN Machine: 192.168.10.42
Static Route on Router-> 192.168.33.0/24 -> 192.168.10.42 and 192.168.66.0/24 -> 192.168.10.42
OpenVPN Machine: FreeBSD 8.3-p3 , gateway_enable="YES", no Firewall
OpenVPN 2.2.2
Branch B:
192.168.33.0/24 and 192.168.66.0/24
OpenVPN Machine: 192.168.33.105
Static Route on Router -> 192.168.10.0/24 -> 192.168.33.105
OpenVPN Machine: FreeBSD 8.3-p3 , gateway_enable="YES", no Firewall
OpenVPN 2.2.2
OpenVPN.conf@Branch A
local 1.2.x.4
port 1194
proto tcp
dev tun
ca xxxx
cert xxxx
key xxxx
dh xxxx
server 10.192.168.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.10.0 255.255.255.0"
client-config-dir ccd
route 192.168.66.0 255.255.255.0
route 192.168.33.0 255.255.255.0
client-to-client
keepalive 10 30
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
ccd file @Branch A
iroute 192.168.66.0 255.255.255.0
iroute 192.168.33.0 255.255.255.0
OpenVPN.conf@Branch B
client
dev tun
proto tcp
remote 1.2.x.4 1194
nresolv-retry infinite
nobind
persist-key
persist-tun
ca xxx
cert xxx
key xxx
ns-cert-type server
comp-lzo
verb 3
Okay, here is the issue, I am having trouble to establish traffic between two subnets, here is the scenario:
192.168.10.42 (OpenVPN Machine@A) ping to
192.168.33.105 (OpenVPN Machine@B) OK
192.168.33.21 (Site B GW) NO
192.168.33.xx (Anyother Machine at Site B) NO
192.168.66.any NO
192.168.10.xx (One of laptop@A) ping to
192.168.33.105 (OpenVPN Machine@B) OK
192.168.33.21 (Site B GW) YES
192.168.66.any OK
192.168.33.105 (OpenVPN Machine@B) ping to
192.168.10.42 (OpenVPN Machine@A) OK
192.168.10.xx (Anyother machine at Site A) NO
192.168.33.21 (Site B GW) ping to
192.168.10.42 (OpenVPN Machine@A) OK
192.168.10.1 (Stie A GW) NO
192.168.10.xx (anyother machine at Site A) YES
I was trying to solve this for several days, anyone who can help, Please~~