hello friends,
I am trying to setup an openvpn server on centos box on work office so I can access it from outside.
I followed the following tutorial
http://www.server-world.info/en/note?os=CentOS_6&p=openvpn
I succeed to connect using openvpn client but i cannot access the lan (ping fails)
centos box has 2 interfaces
eth0 192.168.1.11
eth1 192.168.1.14
I chose the bridge way caused it seemed easier. I set it on eth1
After giving
service openvpn start
interfaces looks like this:
br0 Link encap:Ethernet HWaddr 46:BF:9B:35:7D:E5
inet addr:192.168.1.14 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::44bf:9bff:fe35:7de5/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:22614 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1544089 (1.4 MiB) TX bytes:468 (468.0 b)
eth0 Link encap:Ethernet HWaddr A0:F3:C1:00:3A:F7
inet addr:192.168.1.11 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::a2f3:c1ff:fe00:3af7/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:2130155 errors:0 dropped:0 overruns:0 frame:0
TX packets:260801 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:299427959 (285.5 MiB) TX bytes:44277785 (42.2 MiB)
eth1 Link encap:Ethernet HWaddr A0:F3:C1:00:55:05
inet6 addr: fe80::a2f3:c1ff:fe00:5505/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:1105464 errors:0 dropped:0 overruns:0 frame:0
TX packets:1136 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:80213855 (76.4 MiB) TX bytes:104482 (102.0 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:617748 errors:0 dropped:0 overruns:0 frame:0
TX packets:617748 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:31946419 (30.4 MiB) TX bytes:31946419 (30.4 MiB)
tap0 Link encap:Ethernet HWaddr 46:BF:9B:35:7D:E5
inet6 addr: fe80::44bf:9bff:fe35:7de5/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:22639 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
on openvpn-startup script I have the following:
eth="eth1"
eth_ip="192.168.1.14"
eth_netmask="255.255.255.0"
eth_broadcast="192.168.1.255"
on server.conf I have
port 1194
proto udp
dev tap
;dev-node MyTap
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server-bridge 192.168.1.14 255.255.255.0 192.168.1.235 192.168.1.240
push "route 192.168.1.0 255.255.255.0"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
log /var/log/openvpn/openvpn.log
log-append /var/log/openvpn/openvpn.log
verb 3
Also the strange thing is that client couldn't connect as long as I had port 1194 forwarding on adsl router to 192.168.1.14
When I changed it to 1.11 I could connect but I couldn't reach my office's machings.
thank you in advance for any of your help
