zeed
I have a static IP that I have pointed DNS to.
My internal network is 10.1.1.x
My router points inbound traffic to my OpenVPN server 10.1.1.16 that is running on a vmWare ESXi server.
The OpenVPN has a subnet configured 172.0.8.x (172.0.8.1 Gateway)
I dont want anyone coming in to be able to access the 10.1.1.x network, only the 172.0.8.x network.
I created a new vm machine on the ESXi server, a linux box with a static 172.0.8.5 and a gateway 172.0.8.1
eth0 Link encap:Ethernet HWaddress 00:0C:29:40:7E:83
inet addr:172.0.8.5 Bcast:172.0.8.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe40:7e83/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:68165 errors:0 dropped:0 overruns:0 carrier:0 frame:0
TX packets:40 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:6821841 (6.5 MiB) TX bytes:2232 (2.1 KiB)
But when I try to ping the OpenVPN server that has both the 10.1.1.16 and the gateway 172.0.8.1 address I get the following:
vpn-webserver# ping 172.0.8.1
PING 172.0.8.1 (172.0.8.1) 56*84) bytes of data.
From 172.0.8.5 icmp_seq=2 Destination Host Unreachable
From 172.0.8.5 icmp_seq=3 Destination Host Unreachable
From 172.0.8.5 icmp_seq=4 Destination Host Unreachable
^C
--- 172.0.8.1 ping statistics ---
4 packets transmitted, 0 received, +3 errors, 100% packet loss, time 3874ms
I can connect from the internet to the OpenVPN and get assigned a DHCP ip address 172.0.8.2 and I can ping 172.0.8.1 but not 172.0.8.5.
The server ifconfig shows this:
as0t1: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 172.0.8.1 netmask 255.255.248.0 destination 172.0.8.1
inet6 fe80::7cb7:4680:5854:6f99 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 200 (UNSPEC)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 112 bytes 8328 (8.3 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 10.1.1.16 netmask 255.255.255.0 broadcast 10.1.1.255
inet6 fe80::20c:29ff:fed0:5365 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:d0:53:65 txqueuelen 1000 (Ethernet)
RX packets 114672 bytes 12189451 (12.1 MB)
RX errors 0 dropped 32 overruns 0 frame 0
TX packets 12785 bytes 4746531 (4.7 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
What am I doing wrong??
Thanks
