Re: [Openvpn-users] snmp over vpn

["... ..." <rob_xx17@xxxxxxxxx>]

This is my configuration. I added the line:

push "10.20.38.0 255.255.255.0"

I can ping the device and all other devices across the
VPN tunnel. I can access an ssh server on the LAN side
of the VPN server. But the SNMP traffic is not passing
through my VPN tunnel. I configured all the devices to
pass the traffic to my VPN server. But I don't think
that's the problem since I can ping across VPN. Any
other ideas? Thanks.

rob 

----------------------------------------
Server configuration file:

 port 1194
 proto tcp
 dev tun
 ca /usr/local/openvpn/keys/ca.crt
 cert /usr/local/openvpn/keys/server.crt
 key /usr/local/openvpn/keys/server.key 
 dh /usr/local/openvpn/keys/dh1024.pem
 server 10.11.38.0 255.255.255.0
 push "10.20.38.0 255.255.255.0"
 ifconfig-pool-persist /usr/local/openvpn/ipp.txt
 keepalive 10 120
 comp-lzo
 persist-key
 persist-tun
 status /usr/local/openvpn/openvpn-status.log
 verb 3

Client configuration file:

 client
 dev tun
 proto tcp
 remote 10.1.1.25 1194
 resolv-retry infinite
 persist-key
 persist-tun
 ca "C:\\OpenVPN\\config\\ca.crt"
 cert "C:\\OpenVPN\\config\\client_john.crt"
 key "C:\\OpenVPN\\config\\client_john.key"
 comp-lzo
 verb 3

--- Jon Bendtsen <jon.bendtsen@xxxxxxxxxx> wrote:

> Den mandag 3.apr kl. 17:30 skrev ... ...:
> 
> > Hey all.
> >
> > I just configured a VPN tunnel. I need to use that
> > tunnel for a SNMP traffic. I'm using a basic
> > configuration and the SNMP traffic is not being
> passed
> > through the VPN tunnel. Do I need to make any
> changes
> > in my server/client configurations? Thanks for any
> > considerations.
> 
> This is a routing issue. Once routing is setup
> (correctly) SNMP will  
> travel
> accross the tunnel.
> look at the --route and push directive.
> 
> 
> > rob
> >
> > ps. in the client configuration I had to
> comment-out
> > the 'nobind' directive. It wouldn't work with it
> > enabled.
> 
> If you want it to work, add --float to the
> server.conf
> 
> 
> 
> JonB
> 
> 
>
-------------------------------------------------------
> This SF.Net email is sponsored by xPML, a
> groundbreaking scripting language
> that extends applications into web and mobile media.
> Attend the live webcast
> and join the prime developer group breaking into
> this new coding territory!
>
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
>
https://lists.sourceforge.net/lists/listinfo/openvpn-users
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users