Wrong IP addressing?

ondrej

Hi, I have almost working setup.


Building A LAN net 192.168.1.0 <----> OpenVPN net 192.168.3.0 (via LTE dongle) <---->  Building B LAN net 192.168.2.0

when pinging from "A" IP 192.168.2.1 on "B" -> result is OK but when trying to access SSH or web server service on the same, there is timeout.
But I found that i can access SSH and web server on B from A using tun0 device IP 192.168.3.1. I dont understand why.

route A

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         89.103.214.1    0.0.0.0         UG    0      0        0 eth0
89.103.214.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.224 U     0      0        0 eth0
192.168.2.0     192.168.3.2     255.255.255.0   UG    0      0        0 tun0
192.168.3.0     192.168.3.2     255.255.255.224 UG    0      0        0 tun0
192.168.3.2     0.0.0.0         255.255.255.255 UH    0      0        0 tun0

route B

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.3.9     0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.9.1     0.0.0.0         255.255.255.255 UH    0      0        0 wan0
192.168.3.0     192.168.3.9     255.255.255.224 UG    0      0        0 tun0
192.168.1.0     192.168.3.9     255.255.255.224 UG    0      0        0 tun0
192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 br0
192.168.9.0     0.0.0.0         255.255.255.0   U     0      0        0 wan0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.168.9.1     0.0.0.0         UG    0      0        0 wan0

i was assuming if PING works correct also routing for services on various ports works the same way..

how to fix that?

Traffic

ondrej wrotewhen pinging from "A" IP 192.168.2.1 on "B" -> result is OK but when trying to access SSH or web server service on the same, there is timeout.
But I found that i can access SSH and web server on B from A

Check you have SSH and WWW servers running on A .. and check your firewall.

ondrej

i cannot access client's ssh and www using client's IP 192.168.2.1 however I can access it using server's tun0 device IP 192.168.3.1
question here is, if this is correct or not

ondrej

bumping this thread

Question remains:
how to access OPENVPN client' s services like www and ssh?
ping is possible but http, ssh is rejected.
however it is possible to access these services by using server tun0 ip address. is that correct behaviour of OPENVPN or my config is wrong?

ondrej

Hello,

i spent many days on this already and cannot get this done.
my setup is:
topology subnet

some hosts on 1.0/27 ---- openvpn server 192.168.1.2  ------|vpn net 192.168.3.0/24|-------|client 192.168.2.1|-----some hosts on 2.0/24

I can ping between server and client machine but cannot ssh from each other - there is always timeout. tcpdump shows all traffic is presented at tun0 devices, but not at eth0 and br0

ip r of client

ip r
192.168.9.1 dev wan0  scope link 
192.168.1.0/27 via 192.168.3.1 dev tun0 
192.168.3.0/24 dev tun0  proto kernel  scope link  src 192.168.3.2 
192.168.2.0/24 dev br0  proto kernel  scope link  src 192.168.2.1 
192.168.9.0/24 dev wan0  proto kernel  scope link  src 192.168.9.100 
127.0.0.0/8 dev lo  scope link 
default via 192.168.9.1 dev wan0

ip r of server

ip r
default via 89.103.214.1 dev eth0 
89.103.214.0/24 dev eth0  proto kernel  scope link  src 89.103.214.138 
192.168.1.0/27 dev eth0  proto kernel  scope link  src 192.168.1.2 
192.168.2.0/24 via 192.168.3.1 dev tun0 
192.168.3.0/24 dev tun0  proto kernel  scope link  src 192.168.3.1

how I achieve I can connect from console of client to ssh on server and opposite?