ferchimi
Hi everyone! I'm new to this forum, so I want to thank you in advance
I configured an openVPN server version 2.4.6-1.el7, on a RHEL 7.5 server
Had no problem whatsoever on installing and configuring the service so far, but I reached the point where I have to reach servers on other VLANs with the same connections that are already configured, and installing an openVPN server per VLAN is, of course, out of the question
My network setup is as follows:
OpenVPN server network: 10.10.80.0/24
VLAN on the openVPN server: 10.10.100.0/24
Other VLANs:
VLAN1 network: 10.10.200.0/24
VLAN2 network: 10.10.103.0/24
The relevant part of the openVPN server configuration is as follows:
#OpenVPN config
mode server
tls-server
dev tun
proto udp
port 1194
keepalive 10 120
# Ciphers and Hardening
reneg-sec 0
remote-cert-tls client
crl-verify crl.pem
tls-version-min 1.2
cipher AES-256-CBC
auth SHA512
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
server 10.10.80.0 255.255.255.0
topology subnet
ifconfig-pool-persist ipp.txt
client-config-dir ccd
push "route 10.10.100.0 255.255.255.0" #this is the local VLAN for the OpenVPN server
push "route 10.10.103.0 255.255.255.0" #new app servers VLAN
push "route 10.10.200.0 255.255.255.0" #new db servers VLAN
#End OpenVPN config
As you can see, I already added the routes to be pushed to the clients, and the routes are pushed successfully, but the clients can't connect anyway
I don't have any control on the router/firewall behind our infrastructure to add policy routes or similar, so I guess I'll have to add iptables rules, but I'm not sure about what kind of rules to add, this is the first time I'm required to connect VPN clients throught different VLANs
Despite of not having control on the virtual VMWare host firewall, I have already requested the to add the rules so the VLANs have visibility between them, and tested OK
Again thanks in advance
Fernando
