Client connect over two openvpn tunnels

fabianoheringer

Hi guys, i need some help about this scenario:

Server 1 (192.168.1.0/24) ----OpenVpn ---- Server 2 (192.168.2.0/24)

The pc´s are working great, each network view the another over the tunnel.

Now i need that one client connect via vpn (using openvpn client) through server 1, and be able to view the another netowork on Server 2, like this:

"Client (Notebook) --- OpenVpn" --- Server 1 --- OpenVpn ---- Server 2

I be able to connecting from my notebook on Server 1, its working, but I cant view the Server 2.

That´s something that I do to work ?

maikcat

That´s something that I do to work ?

configure routing accordingly,

post your configs if you want help.

Michael.

fabianoheringer

maikcat wrote
That´s something that I do to work ?
configure routing accordingly,

post your configs if you want help.

Michael.

Hi,

This config is for tunnel between two servers:

dev ovpns1
dev-type tun
tun-ipv6
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 10.0.8.5
ifconfig 172.16.0.1 172.16.0.2
lport 1194
management /var/etc/openvpn/server1.sock unix
push "route 192.168.1.0 255.255.255.0"
route 192.168.2.0 255.255.255.0
secret /var/etc/openvpn/server1.secret
comp-lzo
passtos

This config it´s for connecting clients

dev ovpns2
dev-type tun
tun-ipv6
dev-node /dev/tun2
writepid /var/run/openvpn_server2.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local 187.58.58.90
tls-server
server 10.0.9.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc
client-cert-not-required
username-as-common-name
auth-user-pass-verify /var/etc/openvpn/server2.php via-env
tls-verify /var/etc/openvpn/server2.tls-verify.php
lport 1195
management /var/etc/openvpn/server2.sock unix
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
push "dhcp-option DNS 192.168.1.1"
push "dhcp-option WINS 192.168.1.4"
push "redirect-gateway def1"
client-to-client
duplicate-cn
ca /var/etc/openvpn/server2.ca
cert /var/etc/openvpn/server2.cert
key /var/etc/openvpn/server2.key
dh /etc/dh-parameters.2048
comp-lzo
passtos
persist-remote-ip
float

Thanks!

maikcat

you need to add something like

route 10.0.9.0 255.255.255.0

on your server2 config.

can you also post it?

Michael.

fabianoheringer

maikcat wroteyou need to add something like

route 10.0.9.0 255.255.255.0

on your server2 config.

can you also post it?

Michael.

Hi, tried this option, didn´t work

Client

dev ovpnc1
dev-type tun
tun-ipv6
dev-node /dev/tun1
writepid /var/run/openvpn_client1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 10.0.8.6
lport 0
management /var/etc/openvpn/client1.sock unix
remote 10.0.8.5 1194
ifconfig 172.16.0.2 172.16.0.1
route 192.168.1.0 255.255.255.0
secret /var/etc/openvpn/client1.secret
comp-lzo
passtos

fabianoheringer

Hi, put

route 10.0.9.0 255.255.255.0

, on my server2 , and it wokrd (i mistake when a typed)

Thank you so much Michael, worked like a charm!

maikcat

glad i have helped you out 😃

closing topic,

regards,

Michael.