Hi peeps. This is my first time posting here, so please dont blame me if im missing some informations :lol:
Im using openVPN 2.1.3 to try to configure a tunneling VPN. I want to establish a tunnel between a private network and my servers in the datacenter (10.1.1.0-range) and my home-network (192.168.0.0-range). The access server in datacenter runs a Debian Squeeze and has openVPN configured and running as server with this config file:
mode server
server 10.0.0.0 255.255.255.0
port 443
proto tcp
dev tun
push "route 10.1.1.0 255.255.255.0"
push "route 192.168.0.0 255.255.255.0"
client-to-client
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
ifconfig-pool-persist ipp.txt
verb 3
tun-mtu 1500
tun-mtu-extra 32
mssfix
keepalive 10 120
user nobody
group nogroup
On the clientside im using this configuration to connect to the openvpn server:
client
remote X.X.X.X 443
iroute 192.168.0.0 255.255.255.0
cipher AES-256-CBC
comp-lzo yes
dev tun
proto tcp
nobind
auth-nocache
script-security 2
persist-key
persist-tun
The network topolgy should be like this as a result:
[Client PC 1]
eth0: 192.168.0.2
tun0: 10.0.0.6
[Client PC 2]
eth0: 192.168.0.3
[Client PC 3]
eth0: 192.168.0.4
[Router] (has connection to all 3 clients via lan cables)
eth0: 192.168.0.1
||
||
||
Internet
||
||
||
[openVPN Server] (is connected to the other servers with lan cables via a switch)
eth0: public wan ip
eth1: 10.1.1.1
tun0: 10.0.0.1 | 10.0.0.2
[Server 1]
eth0: public wan ip
eth1: 10.1.1.2
[Server 2]
eth0: public wan ip
eth1: 10.1.1.3
Within the private network in the datacenter and the private network at home there are no problems at all. Every machine can reach all of the others in all directions.
When im connecting Client1 with the openVPN-Server i can reach the openVPN Server via its IP on eth1 and tun0, however im not able to reach Server1 and and Server2 unforutnately. Also i would like to be able to reach every Client via (192.168.0.X) from all the Servers. Im having a hard time to configure this scenario at the moment. All i got running right now is the connection between Client1 and the openVPN server.
When im connected with Client1 to the openVPN-Server this is what "route -n" looks like:
Client1:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
10.0.0.0 10.0.0.5 255.255.255.0 UG 0 0 0 tun0
10.0.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.1.1.0 10.0.0.5 255.255.255.0 UG 0 0 0 tun0
X.X.X.X(wan-ip of openvpn-server) 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 tun0
192.168.0.0 0.0.0.0 255.255.255.0 U 1 0 0 eth0
openVPN-Server:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
X.X.X.X (wan-netID) 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.0.0.0 10.0.0.2 255.255.255.0 UG 0 0 0 tun0
10.1.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
0.0.0.0 X.X.X.X(wan-ip) 0.0.0.0 UG 0 0 0 eth0
This is what "ifconfig" looks like after the connection was established:
Client1:
eth0 Link encap:Ethernet HWaddr 00:XX:XX:XX:XX:XX
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:206901 errors:0 dropped:0 overruns:0 frame:0
TX packets:160038 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:185696845 (185.6 MB) TX bytes:20935690 (20.9 MB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2305 errors:0 dropped:0 overruns:0 frame:0
TX packets:2305 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:191597 (191.5 KB) TX bytes:191597 (191.5 KB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.0.0.6 P-t-P:10.0.0.5 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:76 errors:0 dropped:0 overruns:0 frame:0
TX packets:181 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:11714 (11.7 KB) TX bytes:18142 (18.1 KB)
openVPN-Server:
br0 Link encap:Ethernet HWaddr 00:XX:XX:XX:XX:XX
inet addr:10.1.1.1 Bcast:10.1.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2956 errors:0 dropped:0 overruns:0 frame:0
TX packets:2783 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2186612 (2.0 MiB) TX bytes:201143 (196.4 KiB)
eth0 Link encap:Ethernet HWaddr 00:XX:XX:XX:XX:XX
inet addr:X.X.X.X Bcast:X.X.X.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:67300 errors:0 dropped:0 overruns:0 frame:0
TX packets:15313 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:7852742 (7.4 MiB) TX bytes:59944682 (57.1 MiB)
eth1 Link encap:Ethernet HWaddr 00:XX:XX:XX:XX:XX
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:53130 errors:0 dropped:0 overruns:0 frame:0
TX packets:32421 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:65200456 (62.1 MiB) TX bytes:2280223 (2.1 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:552 errors:0 dropped:0 overruns:0 frame:0
TX packets:552 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:41784 (40.8 KiB) TX bytes:41784 (40.8 KiB)
tap0 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:6 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.0.0.1 P-t-P:10.0.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:214 errors:0 dropped:0 overruns:0 frame:0
TX packets:93 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:20674 (20.1 KiB) TX bytes:15846 (15.4 KiB)
In the end i would like to be able to reach all machines in the datacenter (10.1.1.X) from all the clients and all the clients (192.168.0.X) from all the servers.
Any ideas or suggestions what may cause my problem?
Greetings and thanks for taking you time to read all this 😃
vpenner
