problem with routing to subnet

xirad

Hi,

I have a BIG problem with routing to local subnet via vpn. My net looks like:

LAPTOP - SERVER 192.168.56.101 eth0 -> SERVER tun0 10.8.0.1 -> SERVER eth1 10.0.1.4 -> LOCAL SUBNET 10.0.1.0/24

VPN works greate. From my laptop I am able to connect to SERVER, logs show no errors, it added me new routing:

Wed Dec 18 11:54:15 2013 C:\Windows\system32\route.exe ADD 10.0.1.0 MASK 255.255.255.0 10.8.0.5
Wed Dec 18 11:54:15 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Dec 18 11:54:15 2013 Route addition via IPAPI succeeded [adaptive]
Wed Dec 18 11:54:15 2013 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Wed Dec 18 11:54:15 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Dec 18 11:54:15 2013 Route addition via IPAPI succeeded [adaptive]

I am able to ping 10.0.1.4, but no other hosts from LOCAL SUBNET:

ping 10.0.1.4

Badanie 10.0.1.4 z 32 bajtami danych:
Odpowiedź z 10.0.1.4: bajtów=32 czas=2ms TTL=64
Odpowiedź z 10.0.1.4: bajtów=32 czas=1ms TTL=64
Odpowiedź z 10.0.1.4: bajtów=32 czas=1ms TTL=64
Odpowiedź z 10.0.1.4: bajtów=32 czas=1ms TTL=64

Statystyka badania ping dla 10.0.1.4:
    Pakiety: Wysłane = 4, Odebrane = 4, Utracone = 0
             (0% straty),
Szacunkowy czas błądzenia pakietów w millisekundach:
    Minimum = 1 ms, Maksimum = 2 ms, Czas średni = 1 ms

ping 10.0.1.6
Badanie 10.0.1.6 z 32 bajtami danych:
Upłynął limit czasu żądania.
Statystyka badania ping dla 10.0.1.6:
    Pakiety: Wysłane = 1, Odebrane = 0, Utracone = 1
             (100% straty),

I am sure, that I did something wrong on SERVER with routing, but I don't know what. It looks like:

root@debian:/var/log# cat /proc/sys/net/ipv4/ip_forward
1

root@debian:~/scripts# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         10.0.1.1        0.0.0.0         UG    0      0        0 eth1
10.0.1.0        *               255.255.255.0   U     0      0        0 eth1
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun0
10.8.0.2        *               255.255.255.255 UH    0      0        0 tun0
link-local      *               255.255.0.0     U     1000   0        0 eth0
192.168.56.0    *               255.255.255.0   U     0      0        0 eth0
root@debian:~/scripts#

Please help....
BR
Xirad

xirad

Hi,

Sorry. I didn't think, that configuration is the point. Configuration of server:

local 192.168.56.101
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Configuration of client:

client
dev tun
proto udp
remote 192.168.56.101 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3

My goal is to connect to hosts in my subnet (over the vpn).
There is no problem with connecting to opensvn.

Once again thanks for your time. I spend about 2 days configuring this without success...

BR.
Xirad