Configuring 2 tunnels to access 2 networks on 1 server

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
revolutionit
OpenVpn Newbie
Posts: 1
Joined: Mon Jan 17, 2011 5:33 am

Configuring 2 tunnels to access 2 networks on 1 server

Post by revolutionit » Mon Jan 17, 2011 6:52 am

Everyone,

This is what I'm trying to do, configure 2 tunnels on 1 server to access 2 networks.

Vyatta VC5 is my router software

This is my Corp network (different IP's though) This works just fine and the tunnel starts up. With my firewall setup my tunnel can not access my other networks. This is the way I want it.

openvpn vtun0 {
mode server
openvpn-option "--push route 192.168.10.0 255.255.255.0 --push dhcp-option DNS 192.168.10.1 --client-to-client --comp-lzo"
protocol tcp-passive
server {
subnet 192.168.30.0/29
topology subnet
}
tls {
ca-cert-file /etc/openvpn/test1/file
cert-file /etc/openvpn/test1/file
crl-file /etc/openvpn/test1/file
dh-file /etc/openvpn/test1/file
key-file /etc/openvpn/test1/file

Now that I am running a web server I created a DMZ network. As of now I created another tunnel with a new CA and files in another directory. When I commit it fails.

openvpn vtun1 {
mode server
openvpn-option "--push route 192.168.120.0 255.255.255.240 --push dhcp-option DNS 192.168.20.1 --client-to-client --comp-lzo"
protocol tcp-passive
server {
subnet 192.168.31.0/29
topology subnet
}
tls {
ca-cert-file /etc/openvpn/test2/file
cert-file /etc/openvpn/test2/file
crl-file /etc/openvpn/test2/file
dh-file /etc/openvpn/test2/file
key-file /etc/openvpn/test2/file

Can anyone help me out with this challenge I am having?

Thank you.

User avatar
gladiatr72
Forum Team
Posts: 194
Joined: Mon Dec 13, 2010 3:51 pm
Location: Lawrence, KS

Re: Configuring 2 tunnels to access 2 networks on 1 server

Post by gladiatr72 » Mon Jan 17, 2011 2:30 pm

Hello,

I'm afraid you're going to need to engage the Vyatta community for this one. The problem you've described sounds like a configuration parsing problem with the Vyatta interface rather than with OpenVPN.

-Stephen
[..]I used to think it was awful that life was so unfair. [...]Wouldn't it be much worse if life were fair, and all the terrible things that happen to us come because we actually deserve them? -Marcus Cole

Post Reply