I've got a tunnel set up between a RPi running Arch, and my cloud gateway running Ubuntu 14.10.
The tunnel seems to work fine, and the routes are all set up automatically. I can ping across the VPN, but nothing else.
RouterA
LAN Subnet: 10.11.0.0/24
LAN IP: 10.11.0.1
WAN Interface: eth0
LAN Interface: eth1
RouterA Config
dev tun
port 123
ifconfig 10.6.0.1 10.6.0.2
route 172.16.10.0 255.255.255.0
secret echo.key
log-append echo.log
status echo.status
persist-key
persist-tun
comp-lzo
verb 4
mute 10
tun-mtu 1500
mtu-disc yes
RouterA Routing Table
default via 167.114.1.254 dev eth0
10.4.0.2 dev tun1 proto kernel scope link src 10.4.0.1
10.6.0.2 dev tun0 proto kernel scope link src 10.6.0.1
10.10.111.0/24 via 10.4.0.2 dev tun1
10.11.0.0/24 dev eth1 proto kernel scope link src 10.11.0.1
10.88.0.0/24 via 10.4.0.2 dev tun1
167.114.1.254 dev eth0 scope link
172.16.10.0/24 via 10.6.0.2 dev tun0
RouterB
LAN Subnet: 172.16.10.0/24
LAN IP: 172.16.10.1
WAN Interface: wlan1
LAN Interface: br0
RouterB Config:
remote remote.host 123
dev tun
proto udp
ifconfig 10.6.0.2 10.6.0.1
route 10.11.0.0 255.255.255.0
secret echo.key
log-append echo.log
status echo.status
persist-key
persist-tun
comp-lzo
verb 4
mute 10
tun-mtu 1500
mtu-disc yes
RouterB Routing Table
default via 192.168.96.1 dev wlan1 metric 305
10.6.0.1 dev tun0 proto kernel scope link src 10.6.0.2
10.11.0.0/24 via 10.6.0.1 dev tun0
172.16.10.0/24 dev br0 proto kernel scope link src 172.16.10.1
192.168.96.0/20 dev wlan1 proto kernel scope link src 192.168.108.46 metric 305
From a client on the RouterB subnet, I can ping any host on the RouterA subnet, but can't access RDP, HTTP, etc...
I am using shorewall on both routers, with ACCEPT policies set on all internal zones.
Thoughts?
I can post any other config if required.
Thanks!