dcck.me
Dear My Friends,
I'm newbie here and wanna ask my problem here, I hope someone can help me or give me suggestion,
I wanna make a connection between all network on my client side and all network on server side,
For information
All the VPN machine was using debian 7.
The VPN client machine was 10.4.12.13 which have network 10.4.12.0/26, router 10.4.12.1
The network behind client machine or on the router was :
10.4.0.0/24
10.4.3.0/25
10.4.7.0/25
On the Server side, VPN server machine was use ip public example : 118.2.2.2 on eth0 (public IP) and on eth1 it was 10.1.107.9/25 (Local Network), router 10.1.107.1
The network behind server machine or on the router was :
10.1.101.0/24
10.1.102.0/24
192.168.2.0/24
The VPN Network I used was 10.1.100.0/24,
The configuration on server.conf
-----------------------------------------------------------------
port 1234
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt # generated keys
cert /etc/openvpn/certs/VPN-Server.crt
key /etc/openvpn/certs/VPN-Server.key # keep secret
dh /etc/openvpn/certs/dh1024.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 10.1.100.0 255.255.255.0 # internal tun0 connection IP
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "route 10.1.0.0 255.255.0.0"
push "route 192.168.2.0 255.255.255.0"
keepalive 10 120
cipher DES-EDE3-CBC # Triple-DES
comp-lzo # Compression - must be turned on at both end
user nobody
group nogroup
persist-key
persist-tun
status log/openvpn-status.log
verb 3 # verbose mode
mute 20
client-to-client
-----------------------------------------------------------------
and on the client was
-----------------------------------------------------------------
client
dev tun
proto udp
remote 118.2.2.2 1234 # VPN server IP : PORT
#resolv-retry infinite
nobind
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
cipher DES-EDE3-CBC
comp-lzo yes
tls-auth /etc/openvpn/ta.key 1
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup
verb 3
-----------------------------------------------------------------
so far I just can ping the VPN server machine and the network behind from VPN client machine,
But when I try on other machine (we call "A" example:10.4.12.12) which have same network as VPN client machine,
"A" can't ping the VPN server machine (10.1.107.9), the routing was pointed to VPN client machine (10.4.12.13).
and from VPN server machine, I can't ping to eth0 VPN client machine (10.4.12.13) but pinging works on tun0 interface,
Please kindly help me
Thanks for your helps and time
