Hi all,
I've an issue with setting up a VPN (OpenVPN site to site).
1. the client OpenVPN ping the VPN server and all VMs on the Lan where is the VPN server
2. A computer on the Lan of client OpenVPN ping the OpenVPN server and VMs on the Lan where is the OpenVPN server
Problems:
3. The server OpenVPN can't ping the client OpenVPN
4. A computer on the Lan of OpenVPN server can't ping the client OpenVPN and PCs on the Lan where is the client OpenVPN
I copy/paste all my current configuration:
1. Server configuration
#server TCP/443
#mode server
proto tcp
port 1194
dev tun
# Keys and certificates
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
cipher AES-256-CBC
# Network
server 10.8.0.0 255.255.255.0
push "route 10.10.1.0 255.255.255.0"
push "route 192.168.0.0 255.255.255.0"
push "route 10.10.10.0 255.255.255.0"
client-config-dir ccd
#route 10.9.0.0 255.255.255.252
route 192.168.0.0 255.255.255.0
route 10.10.10.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.10.1.254"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DOMAIN itcast.local"
push "dhcp-option SEARCH itcast.local"
# Options
persist-key
persist-tun
# Keepalive: send ping every 10 seconds, tunnel down after 120 seconds no response.
keepalive 5 60
reneg-sec 432000
# Security
user nobody
group nogroup
comp-lzo
client-to-client
username-as-common-name
client-cert-not-required
auth-user-pass-verify /etc/openvpn/script/login.sh via-env
;plugin /usr/lib/openvpn/openvpn-auth-pam.so common-auth
;duplicate-cn
# script connect-disconnect
script-security 3 system
client-connect script/connect.sh
client-disconnect script/disconnect.sh
# Log
verb 3
mute 20
status /var/log/openvpn/server_tcp.log
log-append /var/log/openvpn/openvpn.log
up /etc/openvpn/update-resolv-conf
#down /etc/openvpn/update-resolv-conf
2. User flie in CCD directory:
client1
ifconfig-push 10.9.0.1 10.9.0.2
iroute 192.168.0.0 255.255.255.0
client2
ifconfig-push 10.9.1.1 10.9.1.2
iroute 10.10.10.0 255.255.255.0
Client configuration file:
# Client
client
dev tun
proto tcp
remote <IP DU SERVEUR OPENVPN> 443
resolv-retry infinite
cipher AES-256-CBC
# Keys
auth-user-pass
reneg-sec 432000
# Security
nobind
persist-key
persist-tun
comp-lzo
verb 3
redirect-gateway
route-metric 9999
<ca>
CONTENT CERTIFICATE CA
</ca>
Thank you for your Help
