OpenVPN forward through firewall to VPN endpoint and rerouted back in?
Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
OpenVPN forward through firewall to VPN endpoint and rerouted back in?
Hey everyone,
I have just come across a networking problem/layout that has me absolutely scratching my head.
What I think we are going to do is as follows:
We have one connection in that is going to a router/firewall with a certain IP lets call it 142.2.2.20. That is going in on WAN1,and it is going to go through a port forward ( :6333 for example ) to 192.168.3.2 ( the Open VPN server or a VPN server such as ENDIAN community)
From that point it is going to be forwarded back and into the 192.168.2.x network that is in the Router box and connect to all the machines. Is this the way to do it?
Will a Roadwarrior/ client on the outside be able to connect then to the VPN server? and then from there connect to the correct box?
Hey everyone,
I have just come across a networking problem/layout that has me absolutely scratching my head.
What I think we are going to do is as follows:
We have one connection in that is going to a router/firewall with a certain IP lets call it 142.2.2.20. That is going in on WAN1,and it is going to go through a port forward ( :6333 for example ) to 192.168.3.2 ( the Open VPN server or a VPN server such as ENDIAN community)
From that point it is going to be forwarded back and into the 192.168.2.x network that is in the Router box and connect to all the machines. Is this the way to do it?
Will a Roadwarrior/ client on the outside be able to connect then to the VPN server? and then from there connect to the correct box?
thanks,
Ronnie
Using OpenVPN server I open a port in the firewall that I define config file of the OpenVPN server and port forward to the server. Then enable IP forwarding on the VPN server so the private vpn network can reach the internal lan and on the internal lan's router I add a route to the private vpn network via the internal lan IP of the vpn server
The current idea for the network is this: using a linksys/cisco RV082 ( I think thats what its model is) and portforwarding all 1194 udp/tcp to the openvpn server which is an Endian Firewall.
Here is where things start to go wrong I think. The OpenVPN server on Endian is on the same network located at 192.168.2.203..... as the red interface. The green is 192.168.2.15 and the open VPN users use that as the gateway for the OpenVPN.
Using another client on an outside network, I start a OpenVPN connection to the rotuer which then forwards me correctly to the Endian box. On the Endian box I can see the user trying to connect, but on the client all I get is TLS handshake timeouts. Now looking at the Endian logs it looks liek it is workign correctly btu it can't find the clienet host..
This looks like a routing problem to me.. any help would be great.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.