TT99
Hi. This was thought to be a simple exercise, but it turning out not to be.
Public portable class C net originally routed to location A, available
statically to all hosts at that location (along with a private net).
For administration reasons, that portable class C changed to route to a
network at location B (where other public and private networks are also in place).
Goal: Use ovpn to make that entire public class C available again at location A, logically as it was before, via ovpn from location B.
Linux systems are available at both locations, at location B on the machine where the class C now routes, and at location A on the physical network there (machines at A still have the original public class C addresses pingable on them (locally only of course) from when the class C routed there directly.
Any suggestions appreciated! Thanks very much.
TT99
Thanks. Existing client/server configs at end of this message, but they are skeletal since we haven't been able to get past being able to ping the two tunnel systems from both ends.
Goal: Two Linux boxes. Box A has a /24 public net routed to it, and several private nets as well connecting other systems at that location that are not relevant to this case.
Box B at another location has a private net connecting four machines that are relevant (inclusive of Box B)
Box B runs ovpn as client, Box A as server.
I would like for the three machines connected by ethernet to Box A (plus A itself, for a total of four systems at that location doing this) to each have full, static access in and out to four of the public ip addresses routed to Box B at B's location (Box B will also run the iptables firewall). The three other machines connected to Box A at A's location would route through A to ovpn, and thence to B and the public static addresses.
That's really the whole show. So far we have successfully got ovpn connected between A and B using a preshared key. A can ping B, and B can ping A. But we have been unable to figure out how to get past that point, despite a lot of experimenting with routes and some with iptables.
Any suggestions would be much appreciated. Current config files follow. Thanks!
- - -
server
port 1194
proto udp
dev tun
ifconfig 172.29.0.1 172.29.0.2
secret static.key
keepalive 5 60
verb 3
- - -
client
dev tun
remote [server's ip address] 1194 udp
resolv-retry infinite
keepalive 5 60
ifconfig 172.29.0.2 172.29.0.1
secret static.key
