point to point, retaining origin IP

dougmemphis

I have two data centers, with different private subnets, 192.168.1.x and 192.168.2.x, so no ip duplication between the two

I have successfully got the two subnets to talk to each other using two openvpn gateways, I can ssh from any box on 1.x to any box on 2.x and vice versa

However, when i go from 2.x to 1.x, the 1.x boxes all think my ip is the gateway, and not the 2.x box that i am coming from, and vice versa there too. Is there a way to keep my origin ip as i go thru the vpns to the other subnet???

my config is this ( second box is the same with the ifconfig ups reversed and the route have 192.168.2)

remote x.x.x.x
float
port 8000
dev tun
ifconfig 10.0.0.1 10.0.0.2
persist-tun
persist-local-ip
persist-remote-ip
comp-lzo
ping 15
secret /etc/openvpn/p2p.key
route 192.168.1.0 255.255.255.0
chroot /var/empty
user nobody
group nogroup
verb 1

maikcat

hi there,

However, when i go from 2.x to 1.x, the 1.x boxes all think my ip is the gateway, and not the 2.x box that i am coming from,

if i understand correctly you mean that you create an ssh session from 192.168.1.10 to 192.168.2.10
but 192.168.2.10 says that you connect from 192.168.2.1 (your openvpn gateway) , right?

if yes please post the output of

iptables -L -t nat -v

from both openvpn endpoints

i think you are NATing traffic....

Michael.