HELP How to connect a client to server in different location

vill

HI openvpn Guru

I would like to ask , how to configure a client to connect to server in different network connection,

Here are my server configuration

port 1194
proto udp
dev tap0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/XXX.crt
key /etc/openvpn/easy-rsa/2.0/keys/XXX.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.8.0.0 255.255.255.0"
client-to-client
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

CLIENT Configuration

client
dev tap
proto udp
remote 192.168.14.70 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/ww.crt
key /etc/openvpn/www.key
ns-cert-type server
verb 3

Note: This configuration is working in same network connection

Thanks

Highly appreciated your HELP....

vill

Thank you for the reply,

There are two internet connection connection A which is the client and Connection B is the Server,Now how can I do so that they are linked.

vill

Thank you for quick reply
I created an account in Dynamic DNS. and her is my domain villydgerp.no-ip.biz 120.28.45.30 ,what next?

vill

Her are the status of the server and client when peer to peer connection

SERVER

villz:/etc/openvpn # openvpn --config server.conf
Wed Feb 26 14:29:09 2014 OpenVPN 2.2.1 i586-suse-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Jul 1 2011
Wed Feb 26 14:29:09 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Feb 26 14:29:09 2014 Diffie-Hellman initialized with 2048 bit key
Wed Feb 26 14:29:09 2014 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 26 14:29:09 2014 Socket Buffers: R=[114688->131072] S=[114688->131072]
Wed Feb 26 14:29:09 2014 TUN/TAP device tap0 opened
Wed Feb 26 14:29:09 2014 TUN/TAP TX queue length set to 100
Wed Feb 26 14:29:09 2014 /bin/ip link set dev tap0 up mtu 1500
Wed Feb 26 14:29:09 2014 /bin/ip addr add dev tap0 10.8.0.1/24 broadcast 10.8.0.255
Wed Feb 26 14:29:09 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Feb 26 14:29:09 2014 GID set to nobody
Wed Feb 26 14:29:09 2014 UID set to nobody
Wed Feb 26 14:29:09 2014 UDPv4 link local (bound): [undef]:1194
Wed Feb 26 14:29:09 2014 UDPv4 link remote: [undef]
Wed Feb 26 14:29:09 2014 MULTI: multi_init called, r=256 v=256
Wed Feb 26 14:29:09 2014 IFCONFIG POOL: base=10.8.0.2 size=253
Wed Feb 26 14:29:09 2014 IFCONFIG POOL LIST
Wed Feb 26 14:29:09 2014 IT,10.8.0.2
Wed Feb 26 14:29:09 2014 Initialization Sequence Completed
Wed Feb 26 14:29:20 2014 MULTI: multi_create_instance called
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 Re-using SSL/TLS context
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 LZO compression initialized
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 Local Options hash (VER=V4): 'f7df56b8'
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 Expected Remote Options hash (VER=V4): 'd79ca330'
Wed Feb 26 14:29:20 2014 192.168.14.129:57453 TLS: Initial packet from 192.168.14.129:57453, sid=7a5aa452 68d549cf
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 VERIFY OK: depth=1, /C=CA/ST=Alberta/L=Calgary/O=Linux_Canada/OU=Sales_Division/CN=IT/name=Quasar-Server/emailAddress=vil@yahoo.com
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 VERIFY OK: depth=0, /C=CA/ST=Alberta/L=Calgary/O=Linux_Canada_INc/OU=Sales_Division/CN=IT/name=Quasar-Client/emailAddress=vil@yahoo.com
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 26 14:29:24 2014 192.168.14.129:57453 [IT] Peer Connection Initiated with 192.168.14.129:57453
Wed Feb 26 14:29:26 2014 IT/192.168.14.129:57453 PUSH: Received control message: 'PUSH_REQUEST'
Wed Feb 26 14:29:26 2014 IT/192.168.14.129:57453 SENT CONTROL [IT]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Wed Feb 26 14:29:26 2014 IT/192.168.14.129:57453 MULTI: Learn: c6:fc:27:58:aa:2e -> IT/192.168.14.129:57453

CLIENT

openvpn --config client.conf
Thu Feb 27 10:31:52 2014 OpenVPN 2.3.2 x86_64-suse-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Feb 24 2014
Thu Feb 27 10:31:52 2014 WARNING: file '/etc/openvpn/POS01.key' is group or others accessible
Thu Feb 27 10:31:52 2014 Socket Buffers: R=[126976->131072] S=[126976->131072]
Thu Feb 27 10:31:52 2014 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Thu Feb 27 10:31:52 2014 UDPv4 link local: [undef]
Thu Feb 27 10:31:52 2014 UDPv4 link remote: [AF_INET]192.168.14.70:1194
Thu Feb 27 10:31:52 2014 TLS: Initial packet from [AF_INET]192.168.14.70:1194, sid=32141e2c 0bf8648d
Thu Feb 27 10:31:55 2014 VERIFY OK: depth=1, C=CA, ST=Alberta, L=Calgary, O=Linux Canada, OU=Sales Division, CN=IT, name=Quasar-Server, emailAddress=villydger@yahoo.com
Thu Feb 27 10:31:55 2014 VERIFY OK: nsCertType=SERVER
Thu Feb 27 10:31:55 2014 VERIFY OK: depth=0, C=CA, ST=Alberta, L=Calgary, O=Linux Canada, OU=Sales Division, CN=IT, name=Quasar-Server, emailAddress=villydger@yahoo.com
Thu Feb 27 10:31:55 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Feb 27 10:31:55 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 27 10:31:55 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Feb 27 10:31:55 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 27 10:31:55 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Feb 27 10:31:55 2014 [IT] Peer Connection Initiated with [AF_INET]192.168.14.70:1194
Thu Feb 27 10:31:58 2014 SENT CONTROL [IT]: 'PUSH_REQUEST' (status=1)
Thu Feb 27 10:31:58 2014 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Thu Feb 27 10:31:58 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Feb 27 10:31:58 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Feb 27 10:31:58 2014 OPTIONS IMPORT: route options modified
Thu Feb 27 10:31:58 2014 OPTIONS IMPORT: route-related options modified
Thu Feb 27 10:31:58 2014 ROUTE_GATEWAY 192.168.14.1/255.255.255.0 IFACE=eth0 HWADDR=00:1b:b9:61:f0:4f
Thu Feb 27 10:31:58 2014 TUN/TAP device tap0 opened
Thu Feb 27 10:31:58 2014 TUN/TAP TX queue length set to 100
Thu Feb 27 10:31:58 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Feb 27 10:31:58 2014 /sbin/ifconfig tap0 10.8.0.2 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
Thu Feb 27 10:31:58 2014 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.1
Thu Feb 27 10:31:58 2014 GID set to nobody
Thu Feb 27 10:31:58 2014 UID set to nobody
Thu Feb 27 10:31:58 2014 Initialization Sequence Completed

Now what should I configure if I used two different internet connection, Internet connection A - client and Internet connection B- Server.

vill

Anyone can help me...

vill

Thank you for the reply very appreciated your help

Her is my Client IP address 192.168.14.29 sugnetmask 255.255.255.0 and public IP 120.28.45.30 ( connected on different internet connection )

My Server IP 192.168.0.45 255.255.255.0 my Public IP 121.54.54.157 ( connected on different internet connection)

My /etc/rc.d/boot.local

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A FORWARD -s 10.86.0.0/24 -j ACCEPT

iptables -A FORWARD -j REJECT

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to 192.168.14.70

My /etc/sysctl.conf net.ipv4.ip_forward = 1

vill

Yes i want this setup

vill

Hi all

Anyone can solve my problem?