tushar.sharma
Hello All,
setup
192.168.3.100(pc) ---(192.168.3.26-lan) (client) (wan-192.168.103.61)-------------(network)-----------------
----(wan-192.168.103.58) (server) (192.168.2.26-lan)--------------(pc)(192.168.2.100)
I am configuring openvpn server in bridge mode
#########################################################
server config file.
local 192.168.1.138
port 1194
proto udp
dev tap0
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.2.26 255.255.255.0 192.168.2.40 192.168.2.50
keepalive 10 120
user openvpn
group openvpn
persist-key
persist-tun
status openvpn-status.log
verb 5
#########################################################################
Problem
: I am able to ping from pc behind client to pc behind server, but
unable to ping from server to pc behind client.
Both server and client are linux and packets are routed through vpn tunnel only.
Please Help Me.
Mimiko
First thing verify careffuly iptables on both VPN (server and client). Also, on VPN server do you sepcify a ccd file for the cname of the client with an iroute to client's LAN specified?
tushar.sharma
Dear Mimiko thanks for reply,
I am talking of bridge mode and in that you don't have to use
ccd & iroute and route command as far i understood from manuals,
Tushar
Mimiko
Sorry, didn't observed the 'server-bridge' option. Than it's only firewall setups on every point. The OpenVPN server, the OpenVPN client, even the server that is not accesible may be configured to block incomming connections from somewhere.
tushar.sharma
Nopes Dear i have checked and disabled all firewall,
I am just testing on my own setup, and firewall is disabled over everywhere.
let me explain scenario.
(pc 192.168.3.100)----(client 192.168.103.61)----(192.168.103.58)(server)-----------(pc 192.168.2.100)
I can ping from 3.100 to 2.100 but reverse is not working. infact i can ping from machine behind
server to local lan interface of client but not behind it..
Thanking You
Tushar
Mimiko
You state about the bridge setup, but still you use 192.168.2.100. Change it to 192.168.103.101 for example. You must understand that every pc on booth sides must have same IP range mask.
tushar.sharma
Yeah i tried that and that is working fine.
But now i can client to connect to different server with different subnet
so that possible ???
In short if am using bridge mode subnet on both sides must be same for client
and server,,and client cannot connect to other vpn server with different subnet
simultaneously...
Thanking YOu
Tushar
Mimiko
You can assing multiple IPs to same host.
tushar.sharma
Dear Mimiko,
I don't get what you actually want to tell,
Consider following scenario,
server1- bridge mode (local subnet 192.168.2.0/24)
server2- bridge mode (local subnet 192.168.3.0/24)
server3- bridge mode (local subnet 192.168.4.0/24)
and i have three client on same machine to connect to 3 above mentioned server.
All server will assign ip;s to respected tap's from there own subnet. but machines behind client will get ip from subnet of only 1 server i think !!
in that how to include multiple machines behind client.
Thanking yOU
tushar
Mimiko
server1, server2, server3 - are different OpenVPN servers to which OpenVPN client will connect? Or OpenVPN will connect to all of them simultaneously?
tushar.sharma
yes server1, server2 & server3 are different server and openvpn client connect to them one by one, and then runs parallely, each server assign ip to tap adapters from their own subnet.
But what about machines behind client ? in this case how to include multiple machines on client side.
Thanking YOu
Tushar
Mimiko
This is not directly related to OpenVPN, but rather IP configuration. If you connect to different subnets, than is better to use a routed setup.
tushar.sharma
Okay thats true,,this purpose can be solved using routed mode.
Thanking You
Tushar 😃
horasman
Yeah i tried that and that is working fine.
But now i can client to connect to different server with different subnet
so that possible ???
Consider following scenario,
server1- bridge mode (local subnet 192.168.2.0/24) :roll:
Blog India Travel
stopping blood pressure
Cara Model Terbaru
tushar.sharma
So then you will be able to connect to different server say server 2
but problem would be machines behind server 2 wont be able to access
machines behind client.
So your answer is you wont be able to connect to different server with different subnet then.
Thanking You
Tushar
