Hi,
I am having an issue with routing traffic between multiple tunnels..
Here is my environment and configuration files:
(LAN1 - 192.168.0.0/24) 192.168.3.0/24 (LAN3 - 10.3.10.0/24) 192.168.2.0/24 (LAN2 - 10.1.10.0/24)
[client1 - 192.168.0.10] ==================[server - 10.3.10.100]===================[client2 - 10.1.10.15]
.2 .1 .1 .2
Server can ping both clients and vice versa, but the clients cannot ping each other. I have set up some static routes. Here are the routing tables
Server:
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 10.3.10.1 0.0.0.0 UG 0 0 0 eth0
10.1.0.0 192.168.2.2 255.255.0.0 UG 0 0 0 tun1
10.3.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.0.0 192.168.3.2 255.255.255.0 UG 0 0 0 tun0
192.168.2.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun1
192.168.3.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
Client1:
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.3.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 br0
10.0.0.0 192.168.3.1 255.0.0.0 UG 0 0 0 tun0
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 br0
Note: Client1 is also an VPN access server for road warriors (thats why br0) but they are able to ping Server, so I guess there is no problem here.
Client2:
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 10.1.10.1 0.0.0.0 UG 0 0 0 eth1
10.1.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
10.3.0.0 192.168.2.1 255.255.0.0 UG 0 0 0 tun0
192.168.0.0 192.168.2.1 255.255.255.0 UG 0 0 0 tun0
192.168.2.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
The config files on Server:
client1.conf
-------------
port 1195
proto udp
dev tun
secret server-key.txt
ifconfig 192.168.3.1 192.168.3.2
keepalive 10 120
comp-lzo
persist-key
persist-tun
push "route 10.0.0.0 255.0.0.0"
status server-tcp.log
verb 3
client2.conf
-------------
port 1194
proto udp
dev tun
secret server-key.txt
ifconfig 192.168.2.1 192.168.2.2
keepalive 10 120
comp-lzo
persist-key
persist-tun
push "route 10.3.0.0 255.255.0.0"
status server-tcp.log
verb 3
Config on Client1:
dev tun
proto udp
remote server.example.com 1195
resolv-retry infinite
nobind
secret server-key.txt
ifconfig 192.168.3.2 192.168.3.1
comp-lzo
verb 3
Config on Client2:
dev tun
proto udp
remote server.example.com 1194
resolv-retry infinite
nobind
secret server-key.txt
ifconfig 192.168.2.2 192.168.2.1
comp-lzo
verb 3
So my question is why cannot the Server forward the packets from one tunnel to the another? IP forwarding on all three servers is enabled.
Thanks a lot for any help or advice!
--
Peter
