mwilstrup
Hi guys,
I'm quit new to this OpenVPN, and trying to make out Server "gateway" to several subnets for our client... Heres the scenario:
We have a OpenVPN server OVF installed in our VMware enviroments ... It's placed in a DMZ, and accessible from outside .. The server has 3 network adapters ADD'ed ( one for each subnet ) ...
The "mangement" interface is on the eth0, this is det DMZ network ... Eth1 & Eth2 is configurated without gateway offc, but static routes added to route traffic..
Now, my brainstorming wanted to give an VPN user, access to all these subnets, and let the server "route" the traffic trough the right interfaces ... Like Traffic 10.5.0.0 --> eth1 10.6.0.0 -->eth2 .. But unfortunaly it can't ... Or am I doing something wrong ??
Im " routing, using Nat " I have all private subnets specified ... Any suggestions ??? Anything would be mostly appreciated ..
/Morten
mwilstrup
Hi @Debbie10t
Im sorry, I was a bit quick on the trigger there - was kind of desperate for a solution 🙂
As i said i've installed this as a OVF template from OpenVPN's server ... It's kind of difficult så find the config files for an rookie like me ... Every change and setting is set via the Ovpn-init, and in the GUI, and can't seem to find it enywhere ...
found the as.conf, but can't see my changes in it ...
: root@openvpnas:/usr/local/openvpn_as/etc# vi as.conf
# System users that are allowed to access the server agent XML API.
# The user that the web server will run as should be in this list.
system_users_local.0=root
system_users_local.1=openvpn_as
# The user/group that the web server will run as
cs.user=openvpn_as
cs.group=openvpn_as
# socket directory
general.sock_dir=~/sock
# path to linux openvpn executable
# if undefined, find openvpn on the PATH
#general.openvpn_exe_path=
# source directory for OpenVPN Windows executable
# (Must have been built with MultiFileExtract)
sa.win_exe_dir=~/exe
# The company name will be shown in the UI
sa.company_name=OpenVPN Technologies, Inc.
# server agent socket
sa.sock=~/sock/sagent
# If enabled, automatically generate a client configuration
# when a client logs into the site and successfully authenticates
cs.auto_generate=true
# files for web server (PEM format)
cs.ca_bundle=~/web-ssl/ca.crt
cs.priv_key=~/web-ssl/server.key
cs.cert=~/web-ssl/server.crt
# web server will use three consecutive ports starting at this
# address, for use with the OpenVPN port share feature
cs.dynamic_port_base=870
# which service groups should be started during
# server agent initialization
sa.initial_run_groups.0=web_group
#sa.initial_run_groups.1=openvpn_group
# use this twisted reactor
sa.reactor=epoll
# The unit number of this particular AS configuration.
# Normally set to 0. If you have multiple, independent AS instances
# running on the same machine, each should have a unique unit number.
sa.unit=0
# If true, open up web ports on the firewall using iptables
iptables.web=true
vpn.server.user=openvpn_as
vpn.server.group=openvpn_as
Can anyone tell me where the GUI saves Client/server profiles ?
/M
mwilstrup
Correct,
OpenVPN's Virtua Appliance for VMware ...
