LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 06-02-2009, 12:26 PM   #1
jwpat
LQ Newbie
 
Registered: Jun 2009
Posts: 1

Rep: Reputation: 0
OpenVPN cannot ping within network


I just set up an OpenVPN server on IPcop. My client is running Windows XP. I am able to connect to the server fine, can ping the server from the client and the client from the server. However, my client cannot actually communicate with any of the other machines within the network.



Internal network is 10.0.0.0 255.0.0.0 gateway 10.0.0.1
Internal IP Address of IPcop/openvpn server 10.5.10.131 255.0.0.0 on lan-1
External IP Address of IPcop/openvpn server 12.x.x.x 255.x.x.x on wan-1
OpenVPN server 172.16.0.1 255.255.255.255 on tun0-00
OpenVPN client assigned 172.16.0.6 by openvpn server

OpenVPN client can ping OpenVPN server on 172.16.0.1
OpenVPN client can ping OpenVPN server on 10.5.10.131
OpenVPN client cannot ping any other devices on the 10.0.0.0 network


Any thoughts? I've tried everything I can think of and cannot get this network running.
 
Old 06-03-2009, 08:50 PM   #2
billymayday
Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
Do you have an entry along the lines of

push "route 10.0.0.0 255.255.255.0"

in your server.conf?
 
Old 06-04-2009, 06:46 PM   #3
TimothyEBaldwin
Member
 
Registered: Mar 2009
Posts: 249

Rep: Reputation: 27
Quote:
Originally Posted by billymayday View Post
Do you have an entry along the lines of

push "route 10.0.0.0 255.255.255.0"

in your server.conf?
That's not the problem, as the client can ping 10.5.10.131.

Do the hosts, or just all the routers on 10.0.0.0/8 have a route to 172.16.0.0/16 via the OpenVPN server?
 
Old 06-04-2009, 06:52 PM   #4
billymayday
Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
I assume, when he says "my client cannot actually communicate with any of the other machines within the network" that he means the network behind the VPN, is 10.0.0.0 subnet.
Expanding the scope of the VPN to include additional machines on either the client or server subnet.
Quote:
Including multiple machines on the server side when using a routed VPN (dev tun)

Once the VPN is operational in a point-to-point capacity between client and server, it may be desirable to expand the scope of the VPN so that clients can reach multiple machines on the server network, rather than only the server machine itself.

For the purpose of this example, we will assume that the server-side LAN uses a subnet of 10.66.0.0/24 and the VPN IP address pool uses 10.8.0.0/24 as cited in the server directive in the OpenVPN server configuration file.

First, you must advertise the 10.66.0.0/24 subnet to VPN clients as being accessible through the VPN. This can easily be done with the following server-side config file directive:

push "route 10.66.0.0 255.255.255.0"

Next, you must set up a route on the server-side LAN gateway to route the VPN client subnet (10.8.0.0/24) to the OpenVPN server (this is only necessary if the OpenVPN server and the LAN gateway are different machines).

Make sure that you've enabled IP and TUN/TAP forwarding on the OpenVPN server machine.
ref: http://www.openvpn.org/index.php/ope...wto.html#scope

Last edited by billymayday; 06-04-2009 at 06:54 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenVPN conencts but can't ping servers on the other network. klaasde Linux - Networking 5 08-06-2008 04:32 AM
OpenVPN Bridge... Clients cant ping server or network ligerous Linux - Networking 1 05-24-2008 06:59 PM
OpenVPN - Can't ping private network chabam Linux - Networking 2 11-27-2007 07:35 AM
OpenVPN Client can't ping host by name mrpc_cambodia Linux - General 4 04-18-2006 09:30 PM
OpenVPN setup - can ping only one way across VPN tunnel rob_xx17 Linux - Networking 3 04-14-2006 06:36 AM


All times are GMT -5. The time now is 03:51 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration