Re: [Openvpn-users] VPN routing problem - no ping replies

["Marc Lentwojt" <m.lentwojt@xxxxxxxx>]

Hi,

i think, the problem is, that sedi does not know, where ginas network can
be reached. You have to add the route for ginas network manually on sedi.
Try to add the following routes on sedi:


10.0.0.4 via 10.0.0.1

and on ginas side:

10.0.0.2 via 10.0.0.3

Because gina reaches sedi via the tunnel-IP and vice versa.

So it was on my setup :-))

Regards

Marc


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi!
>
> I'm currently trieing to setup an small vpn network using openvpnand my
> setup  looks like this
>
> orphi (VPN master)  
> LAN: 192.168.0.0/24
> VPN IP: 10.0.0.1
> VPN IP: 10.0.0.3
> routes:
> 192.168.1.0      10.0.0.2           UG
> 192.168.2.0      10.0.0.4
>
>
> gina (VPN client)
> LAN: 192.168.2.0/24
> VPN IP: 10.0.0.4
> routes:
> 192.168.0.0      10.0.0.3           UG
> 192.168.1.0      10.0.0.3           UG
>
>
> sedi (VPN client)
> LAN: 192.168.1.0/24
> VPN IP: 10.0.0.2
> routes:
> 192.168.0.0      10.0.0.1           UG
> 192.168.2.0      10.0.0.1           UG
>
>
> gina and sedi connect to orphi via openvpn and the connection works - so
> i can ping from orphi to gina, sedi and sedi and gina can ping orphi BUT
> gina cannot ping sedi.
> tcpdump shows me that the packages are ariving and orphi is routing
> right but i don't get any ping-replies her is the tcpdump output.
> sedi pings gina
> gina:
> tcpdump: listening on tun0
> 23:13:58.243697 10.0.0.2 > 192.168.2.1: icmp: echo request
> 23:13:59.247515 10.0.0.2 > 192.168.2.1: icmp: echo request
> 23:14:00.262219 10.0.0.2 > 192.168.2.1: icmp: echo request
>
> orphi:
> tcpdump -i tun0
> 22:04:51.241638 10.0.0.2 > 192.168.2.1: icmp: echo request
> 22:04:52.246121 10.0.0.2 > 192.168.2.1: icmp: echo request
>  
> tcpdump: listening on tun1
> 22:05:15.475661 10.0.0.2 > 192.168.2.1: icmp: echo request
> 22:05:16.490541 10.0.0.2 > 192.168.2.1: icmp: echo request
>
>
> so i'm abit confused as i'm quite shure that i didn't make any serious
> mistake in my setup. (I disabled the firewalls but nothing changed)
>
> any ideas?
>
> thanks in advance for your help and have a nice day,
> chris
>
> - --
> If it compiles, commit to CVS.
> If it links, ship to customer.
> It it runs without bugs, ..., nah, never had that case.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
>
> iD8DBQE/2dlYAgmexFOwd6YRApUVAJ4tBMl7o/Ri6M6F9DFpVTlFRf7CaQCcCxWZ
> FS0i0oLPjgJyly3WRZQfZEM=JJjw
> -----END PGP SIGNATURE-----
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?  SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users




____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users