[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] OpenVPN on Bering


  • Subject: [Openvpn-users] OpenVPN on Bering
  • From: "AdStar" <adstar@xxxxxxxxxxx>
  • Date: Thu, 8 Apr 2004 12:27:02 +1000

Hi guys,

I'm trying to setup a VPN (openvpn version 1.5.0) connection from my home
(ADSL, static IP) to my Office (Static IP).
Both networks have a leaf Bering machine as there firewalls, both running
shorewall 1.4.7c. I followed the guide at
http://www.shorewall.net/1.4/OPENVPN.html but I'm not 100% sure I have got
it right. I can get the openvpn side of things to connect but cannot ping
any machines on either side of the VPN from the firewall or internal
machines.

HOME internal LAN is 10.0.10.0/24
OFFICE internal LAN is 10.0.100.0/24

HOME Tunnel endpoint 192.168.0.1
OFFICE Tunnel endpoint 192.168.0.2

HOME Firewall IP: 202.52.33.145
OFFICE Firewall IP: 67.106.134.127

OFFICE:
/etc/shorewall/zones --> added  'vpn     VPN             VPN network'
/etc/shorewall/interfaces --> added 'vpn     tun0            10.0.10.255'
/etc/shorewall/policy --> added 'loc     vpn             ACCEPT' and 'vpn
loc             ACCEPT'
/etc/shorewall/tunnels --> added 'openvpn                 net
202.52.33.145'

openvpn.conf
dev tun
local 67.106.134.127
ifconfig 192.168.0.2 192.168.0.1
secret secret.key
verb 8


Restarted Shorewall no errors...
Start OpenVPN no errors..
Manually add the route: route add -net 10.0.10.0 netmask 255.255.255.0 gw
192.168.0.2

daemon.log
Apr  8 11:58:00 pyro openvpn[19238]: Current Parameter Settings:
Apr  8 11:58:00 pyro openvpn[19238]:   config = '/etc/openvpn/openvpn.conf'
<snip>
Apr  8 12:00:00 pyro openvpn[32333]: Expected Remote Options hash (VER=V3):
'9af04bc6'
Apr  8 12:00:00 pyro openvpn[17555]: UDPv4 link local (bound):
67.106.134.127:5000
Apr  8 12:00:00 pyro openvpn[17555]: UDPv4 link remote: [undef]
Apr  8 12:01:46 pyro openvpn[17555]: UDPv4 READ [60] from
202.52.33.145:5000:  DATA len=60
Apr  8 12:01:46 pyro openvpn[17555]: Peer Connection Initiated with
202.52.33.145:5000
Apr  8 12:01:46 pyro openvpn[17555]: UDPv4 WRITE [188] to
202.52.33.145:5000:  DATA len=188
Apr  8 12:01:50 pyro openvpn[17555]: UDPv4 WRITE [60] to 202.52.33.145:5000:
 DATA len=60

$ ip route
192.168.0.1 dev tun0  proto kernel  scope link  src 192.168.0.2
10.0.100.0/24 dev eth1  proto kernel  scope link  src 10.0.100.1
67.106.134.0/24 dev eth0  proto kernel  scope link  src 67.106.134.127
10.0.10.0/24 via 192.168.0.2 dev tun0  scope link
default via 67.106.134.1 dev eth0


HOME:
/etc/shorewall/zones --> added  'vpn     VPN             VPN network'
/etc/shorewall/interfaces --> added 'vpn     tun0            10.0.100.255'
/etc/shorewall/policy --> added 'loc     vpn             ACCEPT' and 'vpn
loc             ACCEPT'
/etc/shorewall/tunnels --> added 'openvpn                 net
67.106.134.127'

openvpn.conf
dev tun
local 202.52.33.145
remote 67.106.134.127
ifconfig 192.168.0.1 192.168.0.2
secret secret.key
verb 8

Restarted Shorewall no errors...
Start OpenVPN no errors..
Manually add the route: route add -net 10.0.100.0 netmask 255.255.255.0 gw
192.168.0.1

daemon.log
Apr  8 02:29:06 talon openvpn[16327]: Expected Remote Options hash (VER=V3):
'b700f892'
Apr  8 02:29:06 talon openvpn[18778]: UDPv4 link local (bound):
202.52.33.145:5000
Apr  8 02:29:06 talon openvpn[18778]: UDPv4 link remote: 67.106.134.127:5000
Apr  8 02:29:16 talon openvpn[18778]: UDPv4 WRITE [60] to
67.106.134.127:5000:  DATA len=60
Apr  8 02:29:16 talon openvpn[18778]: UDPv4 READ [188] from
67.106.134.127:5000:  DATA len=188
Apr  8 02:29:17 talon openvpn[18778]: Peer Connection Initiated with
67.106.134.127:5000
Apr  8 02:29:21 talon openvpn[18778]: UDPv4 READ [60] from
67.106.134.127:5000:  DATA len=60
Apr  8 02:29:21 talon openvpn[18778]: UDPv4 WRITE [188] to
67.106.134.127:5000:  DATA len=188

# ip route
192.168.0.2 dev tun0  proto kernel  scope link  src 192.168.0.1
172.31.31.9 dev ppp0  proto kernel  scope link  src 202.52.33.145
10.0.100.0/24 via 192.168.0.1 dev tun0  scope link
10.0.10.0/24 dev eth1  proto kernel  scope link  src 10.0.10.1
default via 172.31.31.9 dev ppp0

I try and ping the OFFICE endpoint from HOME firewall
# ping 192.168.0.2
PING 192.168.0.2 (192.168.0.2): 56 data bytes
ping: sendto: Operation not permitted

HOME: shorewall.log
Apr  8 02:31:39 talon Shorewall:all2all:REJECT: IN= OUT=tun0
MAC=00:90:27:58:e2:dd:00:e0:7d:ba:cd:ee:08:00  SRC=192.168.0.1
DST=192.168.0.2 LEN=84 TOS=00 PREC=0x00 TTL=64 ID=63440 DF PROTO=ICMP TYPE=8
CODE=0 ID=37959 SEQ=0

The above is in my HOME shorewall.log I'm not sure how to fix this.
I'm sure my tunnels file is right. Any help would be muchly appreciated.

Regards
Adam.


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users