sohailab
Hi All,
I have a VPN Access Server and VPN clients(Linux servers) are able to connect to VPN servers successfully, but SSH connection couldn't be established once VPN start working. Please suggest how to keep SSH working on VPN clients once VPN service start working?
The Johan
Most likely you have things set to redirect Internet traffic through the VPN server. So now your incoming SSH request coming from outside the VPN tunnel is answered through the VPN tunnel. Assymmetric routing, won't work.
Either make an exception for the IP you are coming from,
or don't forward all Internet traffic through the VPN server (if this is an option for you),
or contact the VPN client through the VPN tunnel.
sohailab
@novaflash
Yes, internet traffic is going through VPN server and it should be as per requirement. VPN clients are accessible using VPN tunnel as you mentioned.
How can i add exception for a pool of IPs to have SSH on VPN client server? Please help if you can because I am new to this setup.
The Johan
You can use the net_gateway keyword to make traffic for 123.45.67.89 go through the default gateway instead of the VPN tunnel:
route 123.45.67.89 255.255.255.255 net_gateway
You can disable the requirement to have traffic routed through the VPN server.
You can add a route in the routing table of the operating system (you can even make that permanent) using the route add commands in the operating system.
Or you can just connect to this server through it's VPN IP address.
sohailab
I am using VPN client on Debian 8.6 and have GUI based OpenVPN Access server. Where to add default gateway route 123.45.67.89 255.255.255.255 net_gateway on client? I have entered it on CLI of client machine but that gave me Syntax error.
