openvpn and VLAN

Vorms

Hello,
My openvpn server is in a vlan (tagged lan).
The vlan is eth0.10 for the lan( and eth0.20 for the tv)

I have to know wich config file must be adapted to this configuration.
The connection is runnning well, I can use ssh with local ip to connect to the server.
bu, from the client I can't connect to my NAS for example.

For example is this line must be updated according to the vlan :
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
eth0 -> eth0.10 ??

Before moving the server to the vlan the service worked perfectly !

Any help will be welcome... :mrgreen:

Best regards
Thierry

maikcat

can you post the output of ifconfig on your server?

Michael.

Vorms

Hello, many thanks for your reply,
ifconfig result:

ifconfig
eth0 Link encap:Ethernet HWaddr 00:e0:4c:68:29:33
inet6 addr: fe80::2e0:4cff:fe68:2933/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1692166 errors:0 dropped:2 overruns:0 frame:0
TX packets:76593 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:314670701 (300.0 MiB) TX bytes:8216215 (7.8 MiB)
Interrupt:43 Base address:0xc000

eth0.10 Link encap:Ethernet HWaddr 00:e0:4c:68:29:33
inet addr:192.168.1.106 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::2e0:4cff:fe68:2933/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:244679 errors:0 dropped:36688 overruns:0 frame:0
TX packets:72574 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:167422280 (159.6 MiB) TX bytes:7775646 (7.4 MiB)

eth0.20 Link encap:Ethernet HWaddr 00:e0:4c:68:29:33
inet addr:10.0.0.37 Bcast:10.0.0.255 Mask:255.255.255.0
inet6 addr: fe80::2e0:4cff:fe68:2933/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1433762 errors:0 dropped:0 overruns:0 frame:0
TX packets:3871 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:122844267 (117.1 MiB) TX bytes:347042 (338.9 KiB)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:5849 errors:0 dropped:0 overruns:0 frame:0
TX packets:459 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:379648 (370.7 KiB) TX bytes:64794 (63.2 KiB)

maikcat

For example is this line must be updated according to the vlan :
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
eth0 -> eth0.10 ??

it seems you should indeed edit eth0 to eth0.10...

the above NATs traffic to the lan vlan only not to tv vlan..

Michael.

Vorms

Hello,
I modified the iptables and now it is running well.
It's run, but slow.
Is that possible to know where is the bottleneck ?

Best regards and many thanks for your help.

Thierry

maikcat

you can install bwm-ng and see the network utilization,

when you say slow,how exactly are you measuring speed?

Michael.

Vorms

hello,

Now I am in a hotel and I download pictures in the nas on my home.
The average speed is about 50 Kb/sec. My home is with a optical fiber with 100 Mb/sec and the hotel is with 10 Mb/sec.
Best regards
Thierry

maikcat

Now I am in a hotel

if you download a file directly from internet what speed do you measure?

the hotel CAN be apply speed limiters you know...

Michael.