Need help setting up AS with 2 nics (LAN/WAN) use of VMW OVA

RandyS

I'm not familiar with *nix. So I really don't know how to setup OpenVPN AS to use 2 nics. One for WAN and one for LAN. The idea is to route people with te use of a VPN connection to our LAN. So I installed the VMWare Virtual Appliance (OVA). There is just 1 nic in the appliance. Adding a second one in VMWare doesnt give OpenVPN a second NIC (I'm sorry I'm a Windows click guru :mrgreen: . Probably need to configure a NIC on the cli. As I mentioned I don't know much about *nix.
Could someone help/assist me setting this up... is there an instruction/walk through?

RandyS

I found out after trail and error that I need to add lines in /etc/netwerk/interfaces by using nano (nano /etc/netwerk/interfaces)

auto eth1
iface eth1 inet static
address xxx.xxx.xxx.xxx
netmask 255.255.255.248
#gateway xxx.xxx.xxx.xxx

gave it a "ifup eth1" and check with "ifconfig" if it is started. after that I edited interfaces again and give eth0 (LAN) a static IP and no gateway and eth1 (WAN) a static IP.

As we say in Holland "the first hurdle is taken. More to (over)come".

If you have some tips and trics... please let me know.

RandyS

How do I setup OpenVPN the way a VPN Client from the public network can use resources on de private LAN.
I don't get it to work and cannot figure out why. With some tweaking I managed that I can ping from de OpenVPN AS cli to my server (ig 10.1.2.2). But from my VPN Client I can't. This client get a IP 172.27.224.0/20. Would be nice if it was a IP from the internal network. The Client can ping 10.1.1.2 (OpenVPN LAN NIC IP)

Please advice.

RandyS

At the end I almost, almost got it to work. One of the challenges left is the fact that OpenVPN AS doesn't keep the added route persistent (route add -net 10.1.0.0 netmask 255.255.0.0 gw 10.1.1.1 dev eth0). If someone knows how to fix this... will be much appreciated!

Now I need LDAP to work properly. Somehow OpenVPN still using SAM even when LDAP is selected and configured.

This all is hard for someone not familiar with *nix.

RandyS

The moderation and approval takes a long time :? More then 24 hours later and my posts are still not approved.

In the mean while i figured out how to make a added route persistent. I added the line "up route add -net 10.1.0.0/16 gw 10.1.1.1" to "/etc/netwerk/interfaces".

So now I need to figure out why Access Server still uses PAM instead of LDAP... yes it is configured.

maikcat

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

RandyS

Well that's a little weird because I am led to this forum by the openvpn.net website where the Access Server get promoted.
And look where this thread is started: "Board index » OpenVPN Technologies, Inc » Access Server".

Didn't know that this forum is moderated by volunteers. Apologize if I offended you. Much appreciated by me! Keep it up.

On topic: Get everything to work. Learned a lot

Still got a major wish: the possibility to run de Windows Client as a Gina/PLAP/SBL service. Does someone know if this is on the wishlist?

The Johan

OpenVPN Access Server support is available on www.openvpn.net > sign in > support.

Regarding your question about GINA - I assume you intend to make it possible to log on to a network domain controller or some similar login system over an OpenVPN connection. So basically to have the OpenVPN connection up and running BEFORE the user has logged on. If you want to do that, I suggest you install the open source client, and use an autologin profile with that. Install that in your system and enable the system service that OpenVPN installs - it's disabled by default. What that does is start up before the user has logged on, and load any autologin profiles that are in the config subfolders of the OpenVPN installation, and connect with that. Since it's autologin, it will connect without requiring credentials.

RandyS

Thanks for your advice. It works.