Hi Forum

Ich habe ein riesiges Problem mit dem OpenVPN Paket.
Server (Linux)
# 192.168.1.117
dev tap
up office.up
ifconfig 10.1.0.1 255.255.255.0
secret key.txt
port 5001

Client (Windows 2000 SP4)
# Internet DHCP
remote x.x.x.x
dev tap
port 5001
ifconfig 10.1.0.2 255.255.255.0
secret key.txt

office.up
#!/bin/bash
route add -net 10.1.0.0 netmask 255.255.255.0 gw $5

Die OpenVPN Verbindung wird einwandfrei hergestellt.
Ich kann zwischen dem Client Server pingen.
Wenn ich jetzt allerdings eine Route auf der Windows Kiste eintrage, die über den Server als Gateway benutzt und ein Netzwerk dahinter zum Ziel hat (192.168.1.x) bekomme ich immer Zielhost nicht erreichbar. Mit tracert sehe ich, dass der TAP Ausgang genommen wird, aber das Zielnetz nicht erreichbar ist.
Den Haken in Linux habe ich beim IP_Forwarding auch gesetzt.
HILFE
Gruß
Gunnar

From babelfish

"The OpenVPN connection is manufactured perfectly. I can ping from the client to the server . However f I register a route now on the Windows box, to the server used as a gateway and a network behind it to the goal does not have (192.168.1.x) I always get host unreachable. I see with tracert that the TAP exit is taken, but the goal net is not attainable. I also set the hook in Linux with the IP_Forwarding. HELP"


Are the client and the server on the same LAN or on different ends of the VPN?

The configuration:

Internet
VPN-Client
Internet IP
213.60.xx.xx
Virtual IP
10.1.0.2

LAN
VPN-Server
LAN IP
192.168.1.x
Virtual IP
10.1.0.1

Ping between 10.1.0.1 and 10.1.0.2 is successful, but i cannot reach the 192.168.1.x LAN from the VPN-Client. I think there is something wrong in my Linux Server. I have already set the IP-Forward to "1" but nothing worked.

Thanks.
Gunnar

Sounds like a routing problem. Does the client have an entry in it routing table that send packets address to 192.168.x.x over the vpn? It is probably sending packets addresses to 192.168.x.x out to the internet instead of over the VPN.

Hi

I have solved the problem.

The problem was really a routing problem.

The firewall that is making NAT had an other ip adress than the forwarded port for the VPN connection. So IP Pakets took one IP Adress in but an other IP Adress out. That is impossible.

Thanks for the help
Gunnar