Server to Multi-Client Help

cwest6

Hi,

I apologize in advance about the graphic, its all I can do with my limited Paint Skills...

This is the setup I need to make work, and so far I've managed to accomplish the following (lets ignore Client 2 and Device 2, as its the same as 1):

- I've got everything Connected
- I can ping my Client 1 Router from the OpenVPN server
- I can Ping my Device 1 from the OpenVPN server
- I can Ping the OpenVPN server from my Device 1

I CANNOT do the following:

- Ping Device 1 from 'Other Server'
- or Vice Versa

Basically I need to be able to get that setup so that basically all subnets are talking to all subnets, but I'm not entirely sure how to do that. My OpenVPN server is a Ubuntu 11.04 Machine.

I'm fairly certain my issue is with the configuration of the OpenVPN server / ubuntu system.

I would appreciate any help on this!

Server Config:

port 1194
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/testserver.crt
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route 192.168.10.0 255.255.255.0
client-to-client
keepalive 10 120
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 3

maikcat

hi there,

please post the contents of your ccd files,

also add to your server config:

push "route 192.168.1.0 255.255.255.0"

Michael.

cwest6

Hi Micheal,

Here are the contents of my client1 ccd file

iroute 192.168.10.0 255.255.255.0

I realize in order for my other server to communicate over the tunnel to my Devices, I will need to add a static route on my router indicating how to get there, however, I am assuming I will have to allow the firewall on the OpenVPN server to allow and forward that traffic, correct?

Regards,

Carl

maikcat

your ccd file looks ok,to ensure that it is read please add

ifconfig-push 10.8.0.10 10.8.0.9

just noticed that in your diagram one client gets 10.8.0.7 while you are using net30
topology... are you sure about its ip?

I will need to add a static route on my router indicating how to get there, however, I am assuming I will have to allow the firewall on the OpenVPN server to allow and forward that traffic, correct?

firewalling & routing MUST be setup accordingly....

regards

Michael.

cwest6

I am not sure in regards to its IP as I haven't setup client 2 yet.

I will add those Params As soon as I return to the office. Do you by any chance have a sample iptables config, the Linux firewall I'd not something I'm overly familiar with...

Carl

cwest6

Ok, So.

This is getting worse. For some reason now I can no longer ping my Device 1 from the open vpn server. I ping in reverse, from my device 1 to my VPN server, but not the other way around.

I incorporated the Params that you posted and changed nothing else on the server, client, etc..

Any ideas?

maikcat

for testing DISABLE any filtering rules you have
and when your setup work you enabling them back..

I ping in reverse, from my device 1 to my VPN server, but not the other way around.

is there any firewall running on device 1?

Michael.