Hi guys, I need your help to solve a problem on the following scenario:
Firewall: 192.168.160.1
SIP Server: 192.168.160.2
OpenVPN Server on CentOS: 192.168.160.3
The VPN serves to connect customers to our network so that they can use the VOIP services on the SIP Server (192.168.160.2)
The connection works, the problem is that at the SIP Server the request comes from the IP of the VPN server (192.168.160.3) and not from the IP of the client. Having different users all requests arrive from 192.168.160.3 on port 5060 creating problems. How can I get the request to the SIP server directly from the client IP?
I am attaching the OpenVPN Server configuration
OpenVPN Server config
# protocollo
dev tun
port xxxx
proto tcp-server
# server ip
server 172.16.10.0 255.255.255.0
# push to client
push "route 192.168.160.0 255.255.255.0"
# route voip network in gw
route 192.168.90.0 255.255.255.0
# certificati
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh2048.pem
# cifratura
cipher AES-256-CBC
auth SHA1
# opzioni persistenti
persist-key
persist-tun
keepalive 10 60
# directory configurazione cliente
client-config-dir /etc/openvpn/ccd
# parametri openvpn
user nobody
group openvpn
verify-client-cert none
username-as-common-name
plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so login
# log-status
status /etc/openvpn/log/status.log
log-append /etc/openvpn/log/openvpn.log
verb 3
client-config param
ifconfig-push 172.16.10.2 172.16.10.3
iroute 192.168.90.4 255.255.255.255 # GW Mikrotik
iroute 192.168.90.5 255.255.255.255 # Cisco SPA112 on SIP 5060
