Hello Guys!
After install OpenVpnAS, everything was working very well, I'm able to use RDP to servers and PC's.
But an unexpected server restart (power failure) :evil: I'm only able to establish connection from anywhere, but I can't access to my internal network... no ping vpn gw, other devices.
I can't figure out what happens, is so frustrating...
Here is interfaces:
as0t0 inet addr:10.174.20.1 P-t-P:10.174.20.1 Mask:255.255.255.0
eth2 WAN
eth3 LAN
eth4 MPLS
tun0 inet addr:10.174.20.1 P-t-P:10.174.20.2 Mask:255.255.255.255
SERVER:
mode server
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.174.20.0 255.255.255.0
client-config-dir /etc/openvpn/ccd
client-to-client
keepalive 10 120
comp-lzo
user root
group root
tls-server
persist-key
persist-tun
status /var/log/openvpn-status.log
log /var/log/openvpn.log
verb 1
mute 20
max-clients 20
IPTABLES:
##FTP
iptables -t nat -A PREROUTING -i eth2 -p tcp -m tcp --dport 50505 -j DNAT --to 172.16.21.100:50505
iptables -t nat -A PREROUTING -i eth2 -p tcp -m tcp --dport 55556 -j DNAT --to 172.16.21.35:21
##FORWARDING
echo "1" > /proc/sys/net/ipv4/ip_forward
iptables -A OUTPUT -o eth2 -j ACCEPT
#### MASQUERAMIENTO DE LA RED LOCAL A INTERNET ####
iptables -t nat -A POSTROUTING -s 172.16.0.0/16 -o eth2 -j MASQUERADE
#### MASQUERAMIENTO DE LA RED LOCAL ####
iptables -t nat -A POSTROUTING -s 172.16.0.0/16 -o eth4 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 20.0.0.0/24 -o eth3 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 10.174.20.0/24 -o eth3 -j MASQUERADE
#### ACEPTAMOS CONEXIONES LOCALES ####
iptables -A INPUT -i lo -j ACCEPT
####OPENVPN
iptables -A INPUT -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT
IP ROUTE
10.174.20.2 dev tun0 proto kernel scope link src 10.174.20.1
XXX.XXX.XXX.XXX/28 dev eth2 proto kernel scope link src XXX.XXX.XXX.XXX
20.0.0.0/24 dev eth4 proto kernel scope link src 20.0.0.2
10.174.20.0/24 via 10.174.20.2 dev tun0
10.174.20.0/24 dev as0t0 proto kernel scope link src 10.174.20.1
172.16.20.0/22 dev eth3 proto kernel scope link src 172.16.21.254
10.174.0.0/16 dev eth4 proto zebra
default via XXX.XXX.XXX.XXX dev eth2
NOTE:XXX.XXX.XXX.XXX is wan ip address
The VPN Topology of the AS is Layer3 (routing/nat)
Pls any help is appreciated
