LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 04-23-2004, 07:01 AM   #1
groetschel
LQ Newbie
 
Registered: Apr 2004
Posts: 3

Rep: Reputation: 0
Question OpenVPN Routing problem


Hi Forum

Ich habe ein riesiges Problem mit dem OpenVPN Paket.
Server (Linux)
# 192.168.1.117
dev tap
up office.up
ifconfig 10.1.0.1 255.255.255.0
secret key.txt
port 5001

Client (Windows 2000 SP4)
# Internet DHCP
remote x.x.x.x
dev tap
port 5001
ifconfig 10.1.0.2 255.255.255.0
secret key.txt

office.up
#!/bin/bash
route add -net 10.1.0.0 netmask 255.255.255.0 gw $5

Die OpenVPN Verbindung wird einwandfrei hergestellt.
Ich kann zwischen dem Client Server pingen.
Wenn ich jetzt allerdings eine Route auf der Windows Kiste eintrage, die über den Server als Gateway benutzt und ein Netzwerk dahinter zum Ziel hat (192.168.1.x) bekomme ich immer Zielhost nicht erreichbar. Mit tracert sehe ich, dass der TAP Ausgang genommen wird, aber das Zielnetz nicht erreichbar ist.
Den Haken in Linux habe ich beim IP_Forwarding auch gesetzt.
HILFE
Gruß
Gunnar
 
Old 04-23-2004, 11:05 AM   #2
zaphodiv
Member
 
Registered: Oct 2003
Distribution: Slackware
Posts: 388

Rep: Reputation: 30
From babelfish

"The OpenVPN connection is manufactured perfectly. I can ping from the client to the server . However f I register a route now on the Windows box, to the server used as a gateway and a network behind it to the goal does not have (192.168.1.x) I always get host unreachable. I see with tracert that the TAP exit is taken, but the goal net is not attainable. I also set the hook in Linux with the IP_Forwarding. HELP"


Are the client and the server on the same LAN or on different ends of the VPN?
 
Old 04-26-2004, 02:14 AM   #3
groetschel
LQ Newbie
 
Registered: Apr 2004
Posts: 3

Original Poster
Rep: Reputation: 0
The configuration:

Internet
VPN-Client
Internet IP
213.60.xx.xx
Virtual IP
10.1.0.2

LAN
VPN-Server
LAN IP
192.168.1.x
Virtual IP
10.1.0.1

Ping between 10.1.0.1 and 10.1.0.2 is successful, but i cannot reach the 192.168.1.x LAN from the VPN-Client. I think there is something wrong in my Linux Server. I have already set the IP-Forward to "1" but nothing worked.

Thanks.
Gunnar
 
Old 04-27-2004, 01:29 PM   #4
zaphodiv
Member
 
Registered: Oct 2003
Distribution: Slackware
Posts: 388

Rep: Reputation: 30
Sounds like a routing problem. Does the client have an entry in it routing table that send packets address to 192.168.x.x over the vpn? It is probably sending packets addresses to 192.168.x.x out to the internet instead of over the VPN.
 
Old 04-28-2004, 04:07 AM   #5
groetschel
LQ Newbie
 
Registered: Apr 2004
Posts: 3

Original Poster
Rep: Reputation: 0
solved the problem

Hi

I have solved the problem.

The problem was really a routing problem.

The firewall that is making NAT had an other ip adress than the forwarded port for the VPN connection. So IP Pakets took one IP Adress in but an other IP Adress out. That is impossible.

Thanks for the help
Gunnar
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Problem with OpenVPN eantoranz Linux - Networking 8 10-10-2005 04:49 PM
OpenVPN config problem linuxpyro Linux - Networking 7 10-07-2005 07:12 PM
[openvpn] routing at server side Zym0tiC Linux - Networking 2 10-06-2005 03:40 PM
openvpn and shorewall problem from outside network nbccbn Linux - Networking 1 07-12-2005 01:24 AM
openVPN and routing issues mdkelly069 Linux - Networking 0 07-12-2004 12:19 PM


All times are GMT -5. The time now is 01:17 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration