Hi,
I'm trying to make a voip phone function through the vpn tunnel to the server LAN.
The network could be described as:
FIRM LAN (192.168.132.0/24), gateway (192.168.132.1) with a route to tell clients on the lan that to reach the network 10.0.125.0/8 the gw to be used is the vpn server instead of the default one, the vpn server has ip 192.168.132.11, the server config is:
> cat openvpn.conf
push "route 192.168.132.0 255.255.255.0"
push "route 172.16.0.0 255.255.255.0"
dev tun
management 127.0.0.1 1195
server 172.16.0.0 255.255.255.0
dh /var/packages/VPNCenter/target/etc/openvpn/keys/dh1024.pem
ca /var/packages/VPNCenter/target/etc/openvpn/keys/ca.crt
cert /var/packages/VPNCenter/target/etc/openvpn/keys/server.crt
key /var/packages/VPNCenter/target/etc/openvpn/keys/server.key
max-clients 5
comp-lzo
persist-tun
persist-key
verb 3
#log-append /var/log/openvpn.log
keepalive 10 60
reneg-sec 0
plugin /var/packages/VPNCenter/target/lib/radiusplugin.so /var/packages/VPNCenter/target/etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
duplicate-cn
client-to-client
REMOTE LAN (10.0.125.0/8), the gateway is 10.0.125.1, the Openvpn client is 10.0.125.21, the voip phone is 10.0.125.34, the client config is:
dev tun
tls-client
remote RemoteIP 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
proto udp
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass
On the REMOTE LAN I added to the gateway a static route to tell clients on the network that to reach 192.168.132.0/24 ips they have to use 10.0.125.21 as gateway, running the VPN connection it connects perfectly, I can ping an access services (remote desktops, intranet web servers, etc) any alive computer in 192.168.132.0/24 network from any pc on the 10.0.125.0/8 lan, the VOIP phone registers on the voip pbx (samsung, closed source, ip: 192.168.132.2), and if i call both an internal extension or an external phone, the call starts, the telephones ring, when answered the connection starts, but both ends cannot hear the voice of the other end.
Thus the connection is perfect, for normally routed operations (rdp, mail, web, etc.), but for voip voice is not.
What can I do to solve this problem? I have the perception that this issue could be related to the fact that from the client lan I can ping any ip on the server lan, but from the server lan (or server computer) I cannot ping (no answer) any computer on the client lan (but I can ping the other side of tunnel: 172.16.0.6).
Thanks for the answer.
--
Tasu
