2 Openvpn configuration + VoIP

linuxar

Hello everybody, this is my first post, I've been searching on all forum about my problem but I couldn't find anything about this. I'll explain my current configuration

I have two Openvpn servers

{user1} {userX}
| |
| |
[vpn01] [vpn02]
| |
| |
--------------------
LAN
--------------------

[Web] [Mail] [VoIP]

My VPN network is 10.10.9.x
My LAN network is 192.168.1.x
vpn01 lan = 192.168.1.1
vpn02 lan = 192.168.1.2

The default GW of web mail and VoIP is 192.168.1.254, this IP is configured on vpn01

All user are connecting without problem to both vpn servers and can access to all services but when users connected to vpn02 trying to connect to VoIP server they're registering but showing as UNREACHABLE and all users connected on vpn01 can't call to these users.

I have been checking to configure a secondary route with ip route to point that all traffic comming from LAN IP of vpn02 back to this but i haven't lucky.

My idea is to have a both vpn servers running to have a kind of load balancer between both servers, so in case that one server going down the other could accept all traffic but with this problem i can't do this. I test to move the default gw to vpn02 and everything is working well but all user on vpn01 starting to have the same issue.

Does anyone have any idea?

Thank you

maikcat

why dont you give out different ip range on your 2nd vpn?

you could also on the same phisycal server run 2 different instances of openvpn
and use 2 different gateways (2 routers),

but AFAIK you cant use 2 different servers with the same vpn subnet configured...

Michael.

linuxar

Hello Michael, I've been testing to have 10.10.9.x on vpn01 and 10.10.10.x on vpn02, everything works fine with this but the DMZ or LAN network has 192.168.0.x network and the default GW of the servers could be only 1 IP address. I tested to create an alias on voip server as 192.168.1.x and configured as default gw 192.168.1.254 on vpn02. After that i configured routing on voip server to send all traffic from/to 192.168.1.x to 192.168.1.254 but when users connected to vpn02 trying to connect to voip server they can't register. This is the only service that doesn't work.

Regards,

maikcat

hi there,

Hello Michael, I've been testing to have 10.10.9.x on vpn01 and 10.10.10.x on vpn02, everything works fine with this but the DMZ or LAN network has 192.168.0.x network and the default GW of the servers could be only 1 IP address.

you can always add a static route for the 2nd vpn on your default gateway.. 😉

I tested to create an alias on voip server as 192.168.1.x and configured as default gw 192.168.1.254 on vpn02.

wrong approach..
please read this:
http://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/

configure routing correctly and we look into it.
Michael.