Routering Issues

julianhaines

Hi,

I am new to OpenVPN and having issues getting a VPN working, at my remote site I have a SonicWALL and the local IP range is 10.161.126.0.

My OpenVPN servers IP is 10.161.127.69 with DHCP being the same, I can connect to the VPN without issue but once connected I cant ping anything from the client my server config is below.

Can anyone help?

# Which local IP address should OpenVPN
local 10.161.126.69

# open up this port on your firewall.
port 1196

# TCP or UDP server?
;proto tcp
proto udp

# "dev tun" will create a routed IP tunnel
;dev tap
dev tun

# SSL/TLS root certificate (ca), certificate
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem

# Configure server mode and supply a VPN subnet
server 10.161.127.0 255.255.255.0

# Maintain a record of client <-> virtual IP address
ifconfig-pool-persist ipp-fibre.txt

# out unless you are ethernet bridging.
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

# Configure server mode for ethernet bridging
;server-bridge

# Push routes to the client to allow it
push "route 10.161.126.0 255.255.255.0

# DNS servers provided by opendns.com.
push "dhcp-option DNS 8.8.8.8"

keepalive 10 120

comp-lzo

user nobody
group nogroup

persist-key
persist-tun

status openvpn-status-fibre.log

log-append /etc/openvpn/server-fibre.log

verb 6

plugin /usr/lib/openvpn/openvpn-auth-pam.so openvpn
client-cert-not-required
username-as-common-name

reneg-sec 0

Traffic

What machine are you trying to ping ?

julianhaines

Hi,

I am trying to ping the SonicWALL router and any server in the 10.161.126.0 subnet,

Regards
Julian

julianhaines

Hi,

Below are the IP's I am trying to ping:

10.161.126.4 (SonicWALL gate) = Cant ping
10.161.126.111 (Backup Proxy) = Cant Ping
10.161.126.5 (ESX Server) = Cant Ping
10.161.126.69 (OpenVPN server) = OK

10.161.127.1 = OK
10.161.127.6 (VPN DHCP Client) = OK

Regards
Julian

Traffic

Have you read this HOWTO:
HOWTO: Expanding the scope of the VPN to include additional machines

Make sure IP Forwarding is enabled.

Also, although it is technically ok .. using 10.161.126.0/24 for your server lan and 10.161.127.0/24 for your VPN could cause you configuration problems if you type something wrong .. I would advise you choose a more unique VPN IP subnet.