Greetings,
I have a Raspberry Pi running Raspbian (Debian wheezy).
I have OpenVPN Client installed, and on boot it establishes a client connection to a paid VPN service (PIA). It works great.
I have OpenVPN Server installed, it has been properly configured to allow connections from clients. Only works when OpenVPN Client on RPI is not running.
I have a DDNS server monitoring the current WAN IP.
I have an NFS mount on this RPI that connects to my NAS. For watching tv shows, etc.
Now, I would like to be able to run an OpenVPN Server alongside the OpenVPN Client service.
I would like to connect to the RPI remotely, or allow a friend access, and then be able to download stuff from an NFS network share over the OpenVPN connection.
The problem is I don't know how to run both an OpenVPN Server and Client at the same time and have the two connect.
I have set up an OpenVPN server following the instructions here:
http://readwrite.com/2014/04/10/raspberry-pi-vpn-tutorial-server-secure-web-browsing
I have OpenVPN client running and connected to the paid service as well.
When the paid VPN connection is active on the RPI, and I run the OpenVPN server on the RPI and try to connect, I get this error:
TLS Error: cannot locate HMAC in incoming packet from [AF_INET]<
IPADDRESS-OF-OPENVPN-CLIENT-CONNECTED>:1194
Obviously with the proper IP listed there.
I can only assume there is some sort of routing issue where the Desktop client, when establishing a connection to the OpenVPN Server, it cannot 'intermingle' with the already established VPN client connection that the raspberry PI already has running.
Does this make sense to anybody? I feel like I am SO CLOSE. Everything works except this last step when 'bridging/routing' the two connections.
I made a beautiful diagram to help explain WTH I am trying to do. 😃
You can view it here:
http://www.gliffy.com/go/publish/5915309
Or another copy here:
http://oi61.tinypic.com/23wuyra.jpg
Lastly, if you don't mind telling me how to browse the NFS share once the VPN is established, that would be really really helpful.
Otherwise, I'll go create a new thread and work on that separately.
Thank you all very very much in advance.