Page 1 of 1
OpenVPN over IPsec?
Posted: Tue Apr 05, 2011 7:16 pm
by bsdwiz
Is it possible to run OpenVPN over IPsec? By this I mean I first connect into the office using a an IPsec VPN client. Then, once connected I launch OpenVPN gui client and connect to another vpn server running OpenVPN. I've attempted this and I get an IP from the OpenVPN server but that's about it. It stops routing traffic but I stay connected to both the IPsec vpn and the OpenVPN. Also, when I'm in the office and I simply connect to the OpenVPN server from the LAN everything works as expected.
Any help is appreciated.
Re: OpenVPN over IPsec?
Posted: Wed Apr 06, 2011 7:19 am
by janjust
yes this is possible (I've done it in the past).
It depends, of course, on your openvpn setup. Don't use 'redirect-gateway' initially and see if you can reach the VPN endpoint.
Once that is working think about routing.
Re: OpenVPN over IPsec?
Posted: Thu Apr 07, 2011 10:55 pm
by bsdwiz
hmm, can't seem to get it to work. If I disable the redirect-gateway the traffic destined for the internet will work but I can't ping anything on the local network that I've specified in the openvpn server config.
Re: OpenVPN over IPsec?
Posted: Fri Apr 08, 2011 10:21 am
by janjust
without your server setup it is impossible to tell exactly what is going on.
If the server-side LAN cannot be reached then either add a route to the server-side GW to make sure that replies for the VPN traffic are sent back to the VPN server , or add masquerading on the VPN server to make it appear as if all traffic is coming from the VPN server itself.
If you can ping the VPN server IP from the client via the IPsec connection then you've proven for yourself that OpenVPN over IPsec does work. The rest is down to routing.