Hello,
I start using something like site to site vpn with server client using push routes routes and ccd iroute.
Here is description:
1. server site
Server name lspc01
vpn.conf
local 192.168.18.8
port 1194
proto udp
dev tun1
tun-mtu 1500
mssfix 1360
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
server 192.168.44.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 172.100.200.0 255.255.255.224"
push "route 192.168.0.0 255.255.255.0"
push "route 192.168.1.0 255.255.255.0"
#push "dhcp-option DNS 192.168.0.254"
#push "dhcp-option DOMAIN filipnet.cz"
route 192.168.3.0 255.255.255.192
client-to-client
client-config-dir /etc/openvpn/ccd
keepalive 10 120
#tls-auth /etc/openvpn/easy-rsa/ta.key 0
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /etc/openvpn/openvpn-status.log
log /etc/openvpn/vpn.log
verb 3
script-security 2
ccd dir ithelp:
iroute 192.168.3.0 255.255.255.192
Client site:
Client name ithelp
vpn conf:
client
dev tun0
proto udp
remote mypublicip 1194
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/ithelp.crt
key /etc/openvpn/ithelp.key
cipher AES-256-CBC
comp-lzo
verb 5
script-security 2
log /etc/openvpn/vpn.log
status /etc/openvpn/openvpn-status.log
On both site's are configured iptables.
Server network 192.168.0.0/24; vpn network 192.168.44.0/24; dmz network 172.100.200.0/27
Can access any to inside ithelp client network 192.168.3.0/26
Client network can access ping;smb;ssh;ftp to server networks 192.168.0.0/24;vpn network 192.168.44.0/24...
This work good. But my problem is client's in ithelp network 192.168.3.0/26 can't ping to vpn subnet client like notebook with ip 192.168.44.6 and notebook cant ping to ithelp network 192.168.3.0/26.
Strange is the ithelp client server can do this ping to vpn network.
The server lspc01 192.168.0.254 can ping everywhere.
My question is is it even possible to allow clients from 192.168.3.0/26 (client site server) ping to vpn network 192.168.44.0/24
I hope it is understedable description :-)
Thank for any help.
