site to site issue

gucio

Hi,
I have tried to setup Site to Site configuration. Openvpns are connected successfully, I am able to connect to boxes at LAN directly from gateway (where the Openvpn is installed), but when I am trying to connect from any LAN Host to any other boxes located in second network I can do it.
Tcpdump shows:

23:15:11.385522 IP 83.18.107.XXX > 10.11.2.87: ICMP echo request, id 768, seq 50267, length 40
23:15:14.422837 IP 83.18.107.XXX > 10.11.2.87: ICMP echo request, id 768, seq 50523, length 40

It means that source adddress has been changed. I am able to see packets on the second Openvpn.
On the both boxes is already configured NAT for LAN hosts.
Do you have any hints how to resolve that issue?

Thank you a lot,
Gucio

Mimiko

Read this carefully http://www.openvpn.net/index.php/open-source/documentation/howto.html#scope

janjust

This is not an OpenVPN issue, but a routing issue.

It means that source adddress has been changed. I am able to see packets on the second Openvpn.
On the both boxes is already configured NAT for LAN hosts.

check or show the NATting rules ('iptables -t nat -L -n -v' on linux ) : if the packets get translated then there's no way of knowing whether routing is set up correctly to get the traffic back.