Bidirection VPN tunnel between two networks can not setup properly
Posted: Sun Aug 21, 2022 7:20 am
Hello,
I want to connect two networks to give to the remote network (192.168.1.0) a public IP and the networks to be accessible in any direction between.
The system is working, I can access from client side(192.168.1.0) all the devices on 192.168.0.0, but vice versa not. This is what I want to sort out if you can help.
The server device is a qnap NAS, TS-251D. Openvpn is set up via QVPN app.
The client device is an Openwrt router with no public ip.
Server.conf from qnap is this:
The routing table on server:
Also I attach a schema and the vpn setup from qnap server.
I have tried to add routes but I am missing something.
Thank you!
Topology and qvpn setup screenshot here:
https://postimg.cc/cK4krQwK
https://postimg.cc/3khcHMwF
I want to connect two networks to give to the remote network (192.168.1.0) a public IP and the networks to be accessible in any direction between.
The system is working, I can access from client side(192.168.1.0) all the devices on 192.168.0.0, but vice versa not. This is what I want to sort out if you can help.
The server device is a qnap NAS, TS-251D. Openvpn is set up via QVPN app.
The client device is an Openwrt router with no public ip.
Server.conf from qnap is this:
Code: Select all
cd /etc/openvpn
dev tun
keepalive 10 60
reneg-sec 0
persist-key
persist-tun
duplicate-cn
script-security 3
client-to-client
management localhost 7505
#username-as-common-name
client-cert-not-required
auth-user-pass-verify /usr/sbin/qvpn.sauth via-env
multihome
ca /etc/openvpn/keys/ca.crt
dh /etc/openvpn/keys/dh1024.pem
key /etc/openvpn/keys/myserver.key
cert /etc/openvpn/keys/myserver.crt
client-connect /etc/openvpn/connect.sh
client-disconnect /etc/openvpn/disconnect.sh
status /var/log/openvpn-status.log
writepid /var/run/openvpn.server.pid
port 1194
proto udp
max-clients 5
server 10.8.0.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
cipher AES-256-CBC
tls-cipher TLS-ECDHE-RSA-WITH-......this is tha last line
The routing table on server:
Code: Select all
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default dlinkrouter 0.0.0.0 UG 100 0 0 br0
10.0.3.0 * 255.255.255.0 U 0 0 0 lxcbr0
10.0.5.0 * 255.255.255.0 U 0 0 0 docker0
10.0.7.0 * 255.255.255.0 U 0 0 0 lxdbr0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.2 * 255.255.255.255 UH 0 0 0 tun0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
253.253.253.0 * 255.255.255.0 U 0 0 0 vethgw01
I have tried to add routes but I am missing something.
Thank you!
Topology and qvpn setup screenshot here:
https://postimg.cc/cK4krQwK
https://postimg.cc/3khcHMwF