OpenVPN

chabam · 11-26-2007, 01:09 PM

Hello, I have a debian server setup with Openvpn. I can connect and ping the vpn server but I can't connect to the workstations in the private network.

Code:

Private Network - 10.82.81.0/24
OpenVPN Server and Clients - 10.82.82.0/24

OpenVPN server.conf

Code:

dev tun
mode server
port 1194
proto udp
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
persist-key
persist-tun
comp-lzo
keepalive 10 120
verb 6
management localhost 7505
ifconfig 10.82.82.1 10.82.82.2
ifconfig-pool 10.82.82.5 10.82.82.100
route-up "route delete -net 10.82.82.0/24"
route-up "route add -net 10.82.82.0/24 tun0"
push "route 10.82.81.0 255.255.255.0"
push "dhcp-option DNS 10.82.81.2"
push "route 10.82.82.1"
tls-server

OpenVPN client.conf

Code:

client
dev tun
proto udp
remove myserver.dyndns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
##########################
# key stuff goes in here #
##########################

Using tcpdump I can see that the packages are reaching the VPN server but it seems as they are not being forwarded.

Iptables -vL

Code:

Chain FORWARD (policy ACCEPT 42 packets, 2485 bytes)
 pkts bytes target     prot opt in     out     source               destination
  241 15697 LOG        all  --  tun0   any     anywhere             anywhere            state NEW LOG level warning prefix `Tunnel_into_intranet'
  237 15457 ACCEPT     all  --  tun0   any     10.82.82.0/24        anywhere
    0     0 ACCEPT     all  --  any    tun0    10.82.81.0/24        anywhere

Pls help me

chabam · 11-26-2007, 01:49 PM

It seems the ping packages are reaching the destination host but the answer is not being delivered, so I should create a route from my private lan to the vpn server? How can I do that?

Output of route command

Code:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.82.82.2      *               255.255.255.255 UH    0      0        0 tun0
10.82.82.0      *               255.255.255.0   U     0      0        0 tun0
10.82.81.0      *               255.255.255.0   U     0      0        0 eth0
default         10.82.81.1      0.0.0.0         UG    0      0        0 eth0

chabam · 11-27-2007, 07:35 AM

Solved, I didn't create a route from my default lan gateway to the VPN tunnel, duhhh

Thanks anyways for your moral support (??)

just kidding