ariel_b
Hello, we have two working OpenVPN Access Server (vpnas1 & vpnas2) installed as VMware virtual appliance (VM) in failover mode.
So far we have put the first interface (eth0) in the internet-facing distributed port group (DPG_EDGE) while the the second one (eth1) to an internal distributed port group (DPG_INTERNAL1), it works, I can access hosts connected to that internal distributed port group (DPG_INTERNAL1) from vpn client.
Now we would like to have another internal distributed port group (DPG_INTERNAL2) and have the access server to allow clients to access the hosts connected to the new distributed port group (DPG_INTERNAL2) too. My first idea is to add a new interface (ie. eth2), have it assigned to DPG_INTERNAL2, push the route to client, but it seems clients unable to connect to remote hosts.
I also try to directly ping from the first VM (vpnas1) to the second VM (vpnas2) using IP on the eth2 and i cant get any reply when that interface is assigned to DPG_INTERNAL2. But when I set eth2 interface assigned to DPG_INTERNAL1, even without changing the IP on eth2, then I get ping replies.
It seems I can only use one Distributed Port Group, that is the same one that attached to eth1 interface.
Anyone can tell me what I'm doing wrong here? Does multiple interface working for you guys? How can I make the eth2 attached to DPG_INTERNAL2 and make it work? Is this a known issue between OpenVPN, VMware and Distributed Port Group?
Thank you in advance.
reinaldo.gomes
I'm not sure this might be useful to you, but in my pfSense box I Nat'ed OpenVPN traffic from my two internet wans to my localhost, and set OpenVPN to listen at the localhost (127.0.0.1). This way I can have clients connected from both links simultaneously.
