RiverNoord
I'm definitely a newbie, and I've run into a problem using an IPCop machine (V2.1.5) as both the company's default gateway and the IPCop's integrated OpenVPN server. I believe, from the few snippets of info that I've been able to glean, that I need to modify the routes in /etc/rc.d/rc.event.local file and possibly add a forwarding rule in /etc/rc.d/rc.firewall.local, but I'll be... darned if I can figure out what. I would be very, very grateful for any assistance. I expect that I'm just missing something that everyone who's dealt with OpenVPN for some period of time will have no trouble with...
I'm using 192.168.192.0/24 as my OpenVPN address pool, and the internal IPCop interface is 10.10.10.7. OpenVPN connects just fine, but I can only communicate with devices that I have configured static routes on, to route the 192.168.192.0 range of IP addresses to 10.10.10.7. I can do pretty much anything with those devices, and can't even ping anything else.
The part that I don't understand is that the IPCop is the default gateway, so shouldn't all of the responses to the 192... addresses head to the 10.10.10.7 default gateway anyway?
The Internet service is cable, and we've got 5 static IP addresses, in addition to a static address for the modem.
The static IP range is within 64.xxx.xxx.xxx with a subnet mask of 255.248.0.0
Here is the output of route -n on the IPCop: (ok... I guess the forum ignores spaces in the layout... I'll be trying to reformat)
Destination Gateway Genmask Flags- Metric Ref Use Iface
0.0.0.0 Cable modem static IP 0.0.0.0 UG 0 0 0 wan-1
10.10.0.0 0.0.0.0 255.255.255.0 U 0 0 0 lan-1
(static IP network from ISP) 0.0.0.0 255.248.0.0.0 U 0 0 0 wan-1
192.168.192.0(OpenVPN network) 192.168.192.2 255.255.255.0 UG 0 0 0 tun0
192.168.192.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
I'm definitely confused by all of the 0.0.0.0 entries. I'm sure that there are problems, but I don't have a clue which entries I need to make. As the default gateway for the entire network (it's fairly small - about 30 users), and with OpenVPN set up, I would have assumed that the box would have configured itself to handle all traffic to OpenVPN addresses, and that the devices on the internal network would have simply sent the OpenVPN address traffic to the default gateway, where it would recognize them as OpenVPN addresses and pass them along appropriately. I know from the configuration of static routes (all 192.168.192.0 traffic to 10.10.10.7, the internal IPCop interface), that the IPCop tunneling is working, as communication works between OpenVPN clients and those devices.
The IPCop Administration web site has a few topics with 'content to be written'... It just happens that these areas seem to cover the problems I'm having.
Well, again, any help would be most appreciated. Thanks
