VPN Routing

Ehdrian

Hello,

I've done a number of google searches and tests, but I cannot seem to get this working 100%.

GATEWAY/WAN - 10.251.10.1/16
|
SERVER - 10.251.10.2/16, OPENVPN - 10.10.0.1/24 <--> OPENVPN LAN - 10.10.0.0/24
|
LAN - 10.251.0.0/16

- I can ping 10.10.0.6 from 10.251.10.196
- I can ping GATEWAY and SERVER from 10.10.0.6
- I can NOT ping 10.251.10.196 from 10.10.0.6

server.conf
---------------------------
push "route 10.10.0.0 255.255.255.0"
push "route 10.251.0.0 255.255.0.0"
---------------------------

SERVER route
---------------------------
Destination Gateway Genmask Flags Metric Ref Use Iface
default 10.251.10.1 0.0.0.0 UG 100 0 0 eth0
10.10.0.0 10.10.0.2 255.255.255.0 UG 0 0 0 tun0
10.10.0.2 * 255.255.255.255 UH 0 0 0 tun0
10.251.0.0 * 255.255.0.0 U 0 0 0 eth0
link-local * 255.255.0.0 U 1000 0 0 eth0
---------------------------

GATEWAY route
---------------------------
Network/Host IP Netmask Gateway
10.10.0.0 255.255.255.0 10.251.10.2
---------------------------

And tip to help get this working would be much appreciated!

Thanks!
Adrian

maikcat

- I can NOT ping 10.251.10.196 from 10.10.0.6

2 things to check,

is firewall disabled on 10.251.10.196?
if yes try using the openvpn server as its default gateway.

Michael.

Ehdrian

maikcat wrote
- I can NOT ping 10.251.10.196 from 10.10.0.6
if yes try using the openvpn server as its default gateway.
Michael.

That worked:
- I can ping 10.251.10.196 from 10.10.0.6
- I can ping 10.10.0.6 from 10.251.10.196
- I can ping google.ca from 10.251.10.196

Interesting. How is this explained?

Thank you!!
Adrian

maikcat

your router doesnt sends or your pc doesnt accept ICMP redirects....

Michael.

Traffic

Another approach is to add the route for your VPN subnet directly to the machines which require it.

I use a script/batch file on boot to add the VPN subnet route via the VPN server/client ..