OpenVpn Nat/Routing (DMZ with internet access and LAN)

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
bba
OpenVpn Newbie
Posts: 1
Joined: Thu May 19, 2011 3:00 pm

OpenVpn Nat/Routing (DMZ with internet access and LAN)

Post by bba » Thu May 19, 2011 3:19 pm

Hello,

I have somes problems with my openvpn Access Server to reach my LAN network.
A quick explanation about the server network:
I have 2 physical network card "eth1 192.168.71.120 in DMZ with a public IP" "eth0 192.168.1.246 on the LAN", additionally OpenVpn AS installed two virtual interfaces "as0t0 5.5.0.1/21 and as0t1 5.5.8.1/21 attached to the eth1 I guess"
I have different subnets on my LAN "192.168.0-3.0/24 and 192.168.30.0/24"
I have somes troubles to do iptables or routes for accessing the LAN.

I can ping eth0 from vpn not his GW and ping naturally eth1 and the GW.

C:\Users\bba>tracert www.google.fr [If I put google dns 8.8.8.8, because the dns server I want to use are in the LAN Network]

Determination of the route towards www.l.google.com [209.85.147.106]
with a maximum of 30 hops :

1 20 ms 22 ms 21 ms 5.5.8.1
2 94 ms 22 ms 21 ms 192.168.71.253
etc...

C:\Users\bba>tracert 192.168.0.10
Determination of the route towards 192.168.0.10 with a maximum of 30 hops.

1 38 ms 35 ms 28 ms 5.5.8.1
2 * * * Waiting time of the request exceeded.
3 * * * Waiting time of the request exceeded.

So, what I want to do is to forward/route all the traffic from 5.5.0.0/21 and 5.5.8.0/21 to eth0.

Any idea?

The ifconfig: http://pastebin.com/w9wKEbC9

The default routing table: http://pastebin.com/6hXbrkkY

The "iptables -t nat -nvL" : http://pastebin.com/q79zXpZr

Thanks =)

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: OpenVpn Nat/Routing (DMZ with internet access and LAN)

Post by janjust » Thu May 19, 2011 10:39 pm

see topic7036.html
AS comes with professional support, this is the community forum, only for the community version of openvpn.

Post Reply