OpenVPN to connect 2 LANs via Internet

kruser

Greetings,

Sorry if this doubt was already solved here, I used the search but was unable to find the answer. If so, please point me to the right link.

I have the following setup:

[LAN 10.0.1.0/24]-[FIREWALL 1] ----- INTERNET ------- [FIREWALL 2]-[LAN 10.0.2.0/24]

I installed openvpn on both firewalls with the simple setup:

[FIREWALL 1]:

local firewall1.ip
remote firewall2.ip
dev tun
ifconfig 10.100.0.2 10.100.0.1
secret /etc/openvpn/openvpn.key
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
port 9055
verb 4

[FIREWALL 2]

local firewall2.ip
remote firewall1.ip
dev tun
ifconfig 10.100.0.2 10.100.0.1
secret /etc/openvpn/openvpn.key
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
port 9055
verb 4

To make it simple, I added the static routes (using iproute 2) on FIREWALL1 to reach 10.0.2.0/24 via 10.100.0.2 and on FIREWALL 2 to reach 10.0.1.0/24 via 10.100.0.1. The connection is very stable, very fast and everything works fine. I have ip_forward enabled and NO masquerade rules.

My problem: I need each network to see their IP and not the VPN's IP. When I ping 10.0.2.10 from 10.0.1.10, I need 10.0.2.10 to see 10.0.1.10 and not the VPN's IP (10.100.0.1). Even without any MASQUERADE rules, the VPN's IP is what I see when receiving or sending packets. Is there a way to use OpenVPN the way I need? If so, could you help me find the right path?

Thank you in advanced for taking some time helping me to solve this problem.

Again, sorry if it was already posted here.

Best regards!

maikcat

When I ping 10.0.2.10 from 10.0.1.10, I need 10.0.2.10 to see 10.0.1.10 and not the VPN's IP (10.100.0.1). Even without any MASQUERADE rules, the VPN's IP is what I see when receiving or sending packets.

you ARE using NAT along the way....

openvpn does NOT alters packets in any way,iptables do.

please check your rules...

Michael.