Hey guys,
Having an issue with my routing. Here goes:
Simple Network Description:
Servers on Azure:
10.0.0.4 - Domain Controller (DC)
10.0.0.5 - DB server
10.0.0.7 - OpenVPN Access Server (not joined to domain). OpenVPN IP: 5.5.0.1
10.0.0.8 - SCCM
Client Subnet:
DDWRT Router (connected to OpenVPN Access Server - Private IP: 172.16.80.1 || Open VPN IP: 5.8.0.10
172.16.80.0 subnet has numerous clients on it.
Current Status
From Client (172.16.80.110) - Can ping everything. Can ping both addresses of OpenVPN Access server (10.0.0.7 & 5.5.0.1). Can ping all servers on 10.0.0.0 subnet (e.g. can ping SCCM, DB, and DC servers). Can access web servers on the SCCM's IIS via (10.0.0.8).
From OpenVPN Access Server (via ssh console) (10.0.0.7) can ping all clients including router on 172.16.80.0 subnet. Can ping all Windows servers on Azure (10.0.0.0 subnet).
From Windows Servers on Azure (10.0.0.0 subnet). Can ping OpenVPN Access Server (10.0.0.7).
Cannot ping any of the client private IPs (172.16.80.0). This is the problem.
Issue
I need to be able to ping the private ip subnet of 172.16.80.0 from all of my Windows servers (10.0.0.4, .5, .8).
Seems like everything can ping all the active pieces here, but the server just can't route it's ping of 172.16.80.0 subnet through the VPN gateway (even after adding via CMD: route -p add 172.16.80.0 mask 255.255.255.0 10.0.0.7).
One way this can be solved is by connecting each individual windows azure VM (10.0.0.4, .5, .8) to the OpenVPN access server VPN. If the server is connected, it can ping down to the client IPs just fine. This is not a viable option as it is causing many problem with SCCM. Need to be able to reach the client subnet without having to connect the server to the VPN (it's already on the same subnet as the Access Server).
Routing Tables
route -n on OpenVPN Access Server:
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 eth0
5.5.0.0 0.0.0.0 255.255.240.0 U 0 0 0 as0t0
5.8.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 as0t0
5.8.0.7 0.0.0.0 255.255.255.255 UH 0 0 0 as0t0
5.8.0.10 0.0.0.0 255.255.255.255 UH 0 0 0 as0t0
10.0.0.0 0.0.0.0 255.224.0.0 U 1 0 0 eth0
172.16.50.0 0.0.0.0 255.255.255.0 U 0 0 0 as0t0
172.16.80.0 0.0.0.0 255.255.255.0 U 0 0 0 as0t0
route print on Server 2008 R2 on Azure network:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.1 10.0.0.4 5
10.0.0.0 255.224.0.0 On-link 10.0.0.4 261
10.0.0.4 255.255.255.255 On-link 10.0.0.4 261
10.31.255.255 255.255.255.255 On-link 10.0.0.4 261
10.32.0.0 255.255.255.240 10.0.0.6 10.0.0.4 6
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
172.16.80.0 255.255.255.0 10.0.0.7 10.0.0.4 6
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.0.0.4 261
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.0.0.4 261
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
10.32.0.0 255.255.255.240 10.0.0.6 1
172.16.80.0 255.255.255.0 10.0.0.7 1
Thanks for any suggestions. I'm at a loss,
Chris
