I have a routed OpenVPN 2.3.2 tunnel set up between 2 machines.
The tunnel end points @ server/client are IP=10.1.1.1 & IP=10.1.1.2, respectively.
The server's public IP (eth0) = SS.SSS.SSS.96, and the client's public IP (eth0) = CC.C.CC.148.
The server's private IP (eth0) = 172.16.1.123, and the client's private IP (eth1) = 172.16.2.123.
I can ping, but not telnet, across the tunnel to the 'other' LAN. What's missing in my config?
On the client, I can ping the private IP @ server,
ping -c 1 172.16.1.123
PING 172.16.1.123 (172.16.1.123) 56(84) bytes of data.
64 bytes from 172.16.1.123: icmp_seq=1 ttl=64 time=13.4 ms
--- 172.16.1.123 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 13.449/13.449/13.449/0.000 ms
On the server, I can telnet to a service listening @server,
telnet 172.16.1.123 2525
Trying 172.16.1.123...
Connected to 172.16.1.123.
Escape character is '^]'.
But, I can't telnet to the service @server from the client,
telnet 172.16.1.123 2525
Trying 172.16.1.123...
telnet: connect to address 172.16.1.123: Connection timed out
I suspect it's a routing problem.
My server's config includes
cat server.conf
...
daemon
mode server
topology p2p
...
server 10.1.1.0 255.255.255.0
push "route 172.16.1.0 255.255.255.0"
route 172.16.2.0 255.255.255.0
push "route 172.16.2.0 255.255.255.0"
client-config-dir ccd/
client-to-client
...
cat ccd/client.net
ifconfig-push 10.1.1.2 SS.SSS.SSS.96
iroute 172.16.2.0 255.255.255.0
which, once the tunnel's up, results in routes of,
@ server
route -ne
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 SS.SSS.SSS.1 0.0.0.0 UG 0 0 0 eth0
10.1.1.0 10.1.1.2 255.255.255.0 UG 0 0 0 tun1
10.1.1.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun1
SS.SSS.SSS.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
172.16.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
172.16.2.0 10.1.1.2 255.255.255.0 UG 0 0 0 tun1
@ client
route -ne
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 CC.C.CC.1 0.0.0.0 UG 0 0 0 eth0
0.0.0.0 172.16.2.123 0.0.0.0 UG 0 0 0 eth1
10.1.1.0 SS.SSS.SSS.96 255.255.255.0 UG 0 0 0 tun1
CC.C.CC.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
SS.SSS.SSS.96 0.0.0.0 255.255.255.255 UH 0 0 0 tun1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
172.16.1.0 SS.SSS.SSS.96 255.255.255.0 UG 0 0 0 tun1
172.16.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
What route, or other config, is missing to enable telnet to the service @server from the client?
