How to ping Lan of VPNserver ???

everytest

I configured OpenVPN on Bridge mode (dev Tap0) and connect susscessfully to VPNserver but I can't ping to other Server that was same Lan with OpenVPN:

After I connect I were issued IP:192.168.8.50 and can ping 8.3 and 8.29 but can't ping 8.17 or 8.1

How should I config in this case? Please help me, thanks all!

Topology: IPWAN1 Nat all to 8.29

OpenVPNserver(eth0:192.168.8.3)----|
             (bro0:192.168.8.29)---|
                                   |--(8.1)Router(IPWAN1)---(IPWAN2)RouterADSL--Client
Webserver(192.168.8.17)  ----------|

server.cnf

port 1194
proto udp	
dev tap0

#server 10.8.0.0 255.255.255.0	
#ifconfig-pool-persist ipp.txt
server-bridge 192.168.8.29 255.255.255.0 192.168.8.50 192.168.8.100	;

#push "route 192.168.9.0 255.255.255.0	
#push "route 10.0.0.0 255.255.255.0

client

proto udp

dev tap0

remote IPWAN1 1194

bridge-start

eth_ip="192.168.8.29"
eth_netmask="255.255.255.0"
eth_broadcast="192.168.1.255"

maikcat

hi there,

when setting up bridging you are left with br0 interface with local ip,
eth0 & tap0 DONT have ip address...

can you post the output of

brctl show

also you must enable ip forwarding on your server..

Michael.

everytest

Thank maikcat very much:

I enabled ip forwarding on server and disabled selinux and stop iptables;

output ifconfig before start bridge-start

eth0      Link encap:Ethernet  HWaddr 00:0C:29:E5:18:47
          inet addr:192.168.8.3  Bcast:192.168.8.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:29ff:fee5:1847/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:35985 errors:0 dropped:0 overruns:0 frame:0
          TX packets:213 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:6169483 (5.8 MiB)  TX bytes:21290 (20.7 KiB)

brctl show is empty.

When I run /etc/openvpn/bridge-start
and this is output of brctl show:

bridge name     bridge id               STP enabled     interfaces
br0             8000.000c29e51847       no              eth0
                                                        tap0

output ifconfig

br0       Link encap:Ethernet  HWaddr 00:0C:29:E5:18:47
          inet addr:192.168.8.29  Bcast:192.168.8.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:29ff:fee5:1847/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:648 errors:0 dropped:0 overruns:0 frame:0
          TX packets:96 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:80035 (78.1 KiB)  TX bytes:11768 (11.4 KiB)

eth0      Link encap:Ethernet  HWaddr 00:0C:29:E5:18:47
          inet addr:192.168.8.3  Bcast:192.168.8.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:29ff:fee5:1847/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:35985 errors:0 dropped:0 overruns:0 frame:0
          TX packets:213 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:6169483 (5.8 MiB)  TX bytes:21290 (20.7 KiB)

tap0      Link encap:Ethernet  HWaddr BA:4B:B0:C0:F8:40
          inet6 addr: fe80::b84b:b0ff:fec0:f840/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:385 errors:0 dropped:175 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 b)  TX bytes:52833 (51.5 KiB)

bridge-start script

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth0"
eth_ip="192.168.8.29"
eth_netmask="255.255.255.0"
eth_broadcast="192.168.8.255"

maikcat

in server-bridge directive use your eth ip address..

your eth0 ip is 192.168.8.3 so server-bridge directive should be

server-bridge 192.168.8.3 255.255.255.0 192.168.8.50 192.168.8.100

Michael.