Slater1601
Hello folks. First time poster here however I've done a ton of reading lately and just can't seem to find my solution. I have a thorough understanding of advanced networking concepts as I hold several Cisco and Sonicwall certifications, in addition to my job as a Sys/Net Admin. However, I'm quite certain my lack of Linux knowledge is probably where I'm failing on this project. I'll do my best to provide as much pertinent info right off the bat which might make this cake for one of you guru's.
Goal:
Simple. I want to have end to end connectivity between my Dad's LAN subnet (Let's call it Network A), and mine (Let's call it Network B). It's really that simple.
Secondary Goal (if possible):
I'd like to set a rule on my router that says all traffic from hosts A, B, and C on NetworkB get encrypted and sent across, all other hosts use the Internet.
##################################################################
Network A:
Linksys E1000 v1 DD-WRT v24-sp2 (12/24/10) vpn-small - build 15962
Time Warner Cable
LAN Subnet 192.168.10.0 /24
##OpenVPN ConfigA##
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 4
mute 5
log-append /var/log/openvpn
tls-server
port 1194
proto udp
cipher bf-cbc
auth sha1
management 127.0.0.1 5002
management-log-cache 50
mtu-disc yes
topology subnet
duplicate-cn
client-to-client
fast-io
tun-mtu 1500
mssfix 0
fragment 0
server 10.0.0.0 255.255.255.0
dev tun0
push "route 192.168.10.0 255.255.255.0"
Firewall Commands:
iptables -I INPUT -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I FORWARD 1 --source 10.0.0.0/24 -j ACCEPT
##################################################################
##################################################################
Network B:
Linksys E1000 v1 DD-WRT v24-sp2 (12/24/10) vpn-small - build 15962
Time Warner Cable
LAN Subnet 192.168.1.0 /24
##OpenVPN ConfigB##
ca /tmp/openvpncl/ca.crt
cert /tmp/openvpncl/client.crt
key /tmp/openvpncl/client.key
management 127.0.0.1 5001
management-log-cache 50
verb 4
mute 5
log-append /var/log/openvpncl
client
tls-client
dev tun1
proto udp
cipher bf-cbc
auth sha1
resolv-retry infinite
nobind
persist-key
persist-tun
mtu-disc yes
remote DADSHOSTNAME.no-ip.org 1194
tun-mtu 1500
mssfix 0
fragment 0
fast-io
push "route 192.168.1.0 255.255.255.0"
Firewall Commands:
iptables -I FORWARD -i br0 -o tun1 -j ACCEPT
iptables -I FORWARD -i tun1 -o br0 -j ACCEPT
##################################################################
The tunnel is up. From RouterB (192.168.1.1) I can ping RouterA (192.168.10.1). However, from any HOSTS on NetworkB I cannot ping any hosts on NetworkA or RouterA. From RouterA I cannot ping RouterB or any hosts on NetworkB.
Now from the Cisco world I know that I need to define "interesting" traffic so each router knows what traffic should be encrypted or not. This is where most of the documentation I've read is very perplexing and I think it's because all the documentation seems to be geared towards different goals.
So I guess for starters can anyone tell me any obvious things I'm missing? I'd like to get the primary goal figured out and then see if I can make the secondary goal work. Thanks!!
