lelm27
Hello everyone,
First time poster here, I've tried searching for my particular issue through the forums without any success. I am quite new to OpenVPN but I have a pretty simple setup that works to which I am trying to expand.
My basic setup is pretty simple, OpenVPN server hosted on a Windows machine with certificate security. My clients run Ubuntu 12.04 and the VPN establishes itself when the service starts. My clients run an up and down script that does the following:
iptables -t nat -A PREROUTING -d 10.101.6.0/24 -j NETMAP --to 192.168.15.0/24
iptables -t nat -A OUTPUT -d 10.101.6.0/24 -j NETMAP --to 192.168.15.0/24
iptables -t nat -A POSTROUTING -j MASQUERADE
And the down script deletes these.
So my setup allows me to access the whole local network on the site where my clients are by configuring their OVPN network on the Windows server. On the client network, simply connect the Ubuntu machine to the network with a local gateway and we're good.
This setup has worked flawlessly for us for quite a while, however, we are exploring another alternative, we would like to avoid having to install a router. We have purchased a dual NIC machine where I have installed Ubuntu and configured the routing. eth0 is facing the Internet and is directly plugged into a modem. eth1 is connected to a switch which contains the network. eth0 and eth1 are in different networks. Everything pings everything in the local network.
My issue relies in our OVPN setup using the dual-NIC Ubuntu. My script can only NAT the 192.168.15.0 network to the OVPN address, therefore I can remotely talk to the internet-facing NIC and the modem, I can't seem to "cross-over" to the other network (192.168.25.0). I cannot simply change the network that the script maps as the 15.0 network isn't the internet-facing NIC.
I've tried reading about maybe Double NAT? NAT'ing the OVPN to the 15.0 network and then NAT'ing to the 25.0 network? I have no idea what other solutions are available and this surpasses my knowledge in Linux/OVPN quite a bit.
Any ideas? I felt I did not need to provide any config files as my issue is not with my configuration. If more information is needed, let me know.
Thanks for any help provided.
