OpenVPN server behind the Router or Firewall (site-to-site)

TreeDark

good day

I'm new to OpenVPN, I understand only a little turn. Use IPCop for 10 years.
The IPCop OpenVPN has embodied the more I wanted to make a vpn server part.
So I opted for centOS and installed openvpn.
I did the configuration between headquarter and branches as server and client works beauty.
My question is how to network the network, site to site.
I configured the vpn sevidores so well:
-----------------------------------------
#Server A (192.168.0.5 255.255.255.0)
remote ip my server B
port 6500
proto udp
dev tun
float
secret /etc/openvpn/vpn.key
ifconfig 10.50.50.1 10.50.50.2
route 192.168.1.0 255.255.255.0
persist-tun
persist-local-ip
comp-lzo
ping 15
ping-restart 120
user nobody
group nobody
log /var/log/openvpn/openvpn.log
log-append /var/openvpn/openvpn.log
status /var/log/openvpn-status.log
verb 6
------------------------------------------
#Server B (192.168.1.5 255.255.255.0)
remote ip my server A
port 6500
proto udp
dev tun
float
secret /etc/openvpn/vpn.key
ifconfig 10.50.50.2 10.50.50.1
route 192.168.0.0 255.255.255.0
persist-tun
persist-local-ip
comp-lzo
ping 15
ping-restart 120
user nobody
group nobody
log /var/log/openvpn/openvpn.log
log-append /var/openvpn/openvpn.log
status /var/log/openvpn-status.log
verb 6
-----------------------------------------
They are both behind a firewall with IPCop.
I can browse normally within the servers, I can ping hosts, tunels and machines.
What I wonder is:
01 - How to make the machines on the network "A" find the network of "B" (because the hosts are located and machinery).
02 - I need all machines are clients of VPN for this to occur?
03 - OpenVPN needs to be my gateway for this to happen or he can stay behind another gatway?

Thank you for your attention
Sorry my horrible English

maikcat

nice to see that you reposted in english... :mrgreen:

What I wonder is:
01 - How to make the machines on the network "A" find the network of "B" (because the hosts are located and machinery).
02 - I need all machines are clients of VPN for this to occur?
03 - OpenVPN needs to be my gateway for this to happen or he can stay behind another gatway?

your problem is routing...

you need:

set up a static route to each one of your pcs for the remote network pointing to your openvpn server/client lan

or

go to your pcs default gateway and add the static route there....

also you MUST have ip forwarding enabled on both openvpn server/client,

btw which centos are you using?

Michael.

TreeDark

Thanks for the reply,

I use centOS 6.5 x64

How would the route for example with the following configurations:

My firewall has Lan ip 192.168.0.1 mask 255.255.255.0 gtw 192.168.0.1
WAN ip 172.20.x.x mask 255.255.0.0 gtw 172.20.x.x
My VPN "A" has ip 192.168.0.9 mask 255.255.255.0 gtw 192.168.0.1
with tunnel 10.50.50.0

How would the route on my firewall?
route add-net X.X.X.X netmask X.X.X.X gw X.X.X.X

in my server.conf need add something else?

TKS

maikcat

you can add this to your firewall:

route add -net 10.50.50.0 netmask 255.255.255.0 gw 192.168.0.9

and of course you (may) need to add the appropriate allow rules as well...

Michael.