Talkabout
I have a problem in configuring my openvpn server properly to cover a use case to route specific users (user groups) to different subnets. Current configuration:
VPN server
Internal IPs:
eth0 : 192.168.20.9
eth0.100: 192.168.100.9
VPN IP:
10.8.0.1
VPN IP pool:
10.8.0.0/16 => I am using this to assign different ip pools to different users
group => 10.8.0.0/24
group => 10.8.1.0/24
DNS configuration:
group => 192.168.20.10
group => 192.168.100.10
When users from 1. group are connecting to VPN everything works fine, they can access the DNS server (192.168.20.10) and also are able to browse on the internet. When users from 2. group are connecting the requests to the DNS server are not returning back to the client. I have traced the packets via tcpdump and this is what I can confirm:
packets reaching from client (10.8.1.2) to VPN (10.8.0.1)
packets reaching from vpn (10.8.0.1) to eth0.100 (192.168.100.9)
packets reaching DNS (192.168.100.10)
answers reaching eth0.100 (192.168.100.9)
but then those packets are not forwarded to the tun0 interface (10.8.0.1) any more and thus the client never receives an answer. I am stuck here as I do not know why this happens. Obviously the problem is on the VPN server as the communication on the internal network to DNS is working. Maybe somebody can point me into the right direction?
Thanks!
Bye
