[Openvpn-users] vpn routing question

[Jason Keltz <jas@xxxxxxxxxxx>]

Hi everyone,

I have a question re: VPN routing.

I have 2 redundant VPN servers that both provide addresses to clients. 
Each client has a specific address that it will get which will be the same 
whether it connects to either of the VPN servers. The clients, using 
"remote-random" make their selection at connection time (although this can 
change if either of the VPN servers go down).

Each of the VPN servers is connected on a separate network interface to
a private network (a gigabit switch).  On that gigabit switch is also a 
file server which is not connected to the VPN.  Clients must connect to 
the VPN to access the file server.

The VPN works, the routing, forwarding, etc. are working but there is one 
problem....

Since the file server is not on the VPN, it has to know how to return 
packets to the VPN hosts. However, since the address space does not define 
which VPN the client is from, this becomes difficult!   A route on the 
file server like this does the trick ...

route add -net 10.8.0.0 gateway G netmask 255.255.255.0

... but here lies the problem.  G can be one of two possibilities...
It can be the VPN1 private network interface or the VPN2 private
network interface.

Since various clients are connected to both VPNs at the same time, how 
can the file server route back to the proper VPN?

Your help would be greatly appreciated!

Jason.

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users