Hello,
I am trying to setup an OpenVPN server on my gateway within our virtual network (All of the machines are running as VMs on one machine). The way I want this to work is that I want the public network (10.0.1.0/16) to be able to connect with the VPN using a bridged connection into our private network (192.168.1.128/25) and act as a normal user and communicate with the machine already there. I will attach the network topology. Currently the machine on the public network can connect to the private network with an IP address but when I try to ping the other machine I get a destination unreachable error. I have monitored the traffic and see the ARP requests getting sent out but are not getting any replies. Is there something I am missing on the VPN side or is there something wrong with the routing on the Gateway/VPN server?
Also, the Gateway and the public machines are both Linux-based OSes (Ubuntu and Kali respectively).
Here is the current network interfaces on the Gateway
auto lo
iface lo inet loopback
auto br0
iface br0 inet static
address 10.0.1.1
netmask 255.255.0.0
gateway 10.0.1.1
bridge_ports eth0
bridge_fd 9
bridge_hello 2
bridge_maxage 12
bridge_stp off
iface eth0 inet manual
up ip link set $IFACE up promisc on
down ip link set $IFACE down promisc off
#address 10.0.1.1
#netmask 255.255.0.0
#gateway 10.0.1.1
auto eth1
iface eth1 inet static
address 192.168.1.1
netmask 255.255.255.128
gateway 10.0.1.1
auto eth2
iface eth2 inet static
address 192.168.1.129
netmask 255.255.255.128
gateway 10.0.1.1
Here is the Server.conf file on the server
mode server
tls-server
local 10.0.1.1 ## ip/hostname of server
port 1194 ## default openvpn port
proto udp
#bridging directive
dev tap0 ## If you need multiple tap devices, add them here
up "/etc/openvpn/up.sh br0 tap0 1400"
down "/etc/openvpn/down.sh br0 tap0"
persist-key
persist-tun
#certificates and encryption
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
tls-auth ta.key 0 # This file is secret
cipher BF-CBC # Blowfish (default)
comp-lzo
#DHCP Information
ifconfig-pool-persist ipp.txt
server-bridge 192.168.1.129 255.255.255.128 192.168.1.131 192.168.1.254
max-clients 10 ## set this to the max number of clients that should be connected at a time
#log and security
user nobody
group nogroup
keepalive 10 120
status openvpn-status.log
verb 3
Finally, here is the setup on the client
client
dev tap
proto udp
remote 10.0.1.1 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1
cipher BF-CBC
comp-lzo
verb 3
;mute 20
Any points in the right direction would help tremendously.
