bonne I thought I already was posting this, but apparently not. Maybe it was removed because I forgot to paste configs? Anywy, I try again. I want to setup a site-2-site VPN using openvpn. I have setup a server runing openvpn, and a remote gateway also running openvpn. The tunnel comes up, and I can access devices on the servers LAN (192.168.25.0/25) side fra the remote gateway. So far so good. But I also have a LAN connected behind the remote gateway (192.168.27.0/24). Traffic from clients on this remote gateway destinated for the servers LAN will only show up on the remote gateways tun (tcpdump -i tun0), but not on the servers tun1 (tcpdump -i tun1) So it is like the remote gateway tries to tunnel the LANs traffic correct (instead of its default gateway), but the VPN packages never shows up on the server. server config: local xxx.xxx.xxx.xxx port 1195 proto udp dev tun1 ca /etc/openvpn/pki/ca.crt cert /etc/openvpn/pki/issued/server.crt key /etc/openvpn/pki/private/server.key # This file should be kept secret dh /etc/openvpn/pki/dh.pem topology subnet server 10.55.3.0 255.255.255.248 ifconfig-pool-persist ipp_vpn1.txt push "route 192.168.25.0 255.255.255.0" client-config-dir /etc/openvpn/ccd route 192.168.27.0 255.255.255.0 push "dhcp-option DNS 192.168.25.10" client-to-client keepalive 10 120 tls-auth /etc/openvpn/ta.key 0 # This file is secret cipher AES-256-CBC user _openvpn group _openvpn persist-key persist-tun status /etc/openvpn/openvpn-status_vpn1.txt log-append /var/log/openvpn_server_vpn1.log verb 3 mute 20 explicit-exit-notify 1 /etc/openvpn/ccd/vpn1 (remote gateways name is vpn1) contains: iroute 192.168.27.0 255.255.255.0 Clien ovpn: client dev tun proto udp remote xx.xx.xx.xxx resolv-retry infinite nobind user _openvpn group _openvpn persist-key persist-tun <ca> </ca> <cert> </cert> <key> </key> remote-cert-tls server <tls-auth> </tls-auth> key-direction 1 cipher AES-256-CBC verb 3 Is it clear what the issue is - or you want me to send further details? Thanks, Lars.
bonne Apparently permission problem. I moved the ccd outside openvpn dir and gave full access, and then it works. What is minimum requirements? Regards, Lars.
TinCanTech bonne wrote What is minimum requirements? We expect people to read the Howto as a basic bare minimum.
bonne Haha, which I did. The official as well as others as it still didn't work. I read the official again, and I still can't see anything about permission requirements. (?) I found another guy having same issue, and he solved it also by moving the ccd dir out. Regards, Lars.
