Whenever you make a connection, I think you need to refresh the Local LAN1/2 clients' networking to see the new routes.
You can do this by repairing the connection, which is easy if you check the option to show the local area connection icon in the system tray. Or use the /flushdns option of ipconfig. Or, you can reboot the PCs to clear it out. Also, until you get it working, disable the outgoing firewall and the HTTP proxy. And possibly the DNS proxy. I have a customer set up with 4 efw's in different cities connected together. The only way I could get two way traffic working was to make a openvpn connection in each direction. This builds the proper routes to push to the clients. I know, people say you shouldn't have to do this, but I did. Some other tips: If you have created a user to allow the other server to connect, then later changed the remote network settings for that user, (by clicking the 'Configure Networks' button) it won't work. You have to create the user and add the remote network settings and get it perfect the first time. If you need to change the settings, delete the user and create it again. Make sure you click the option "Block DHCP responses coming from tunnel" in both the Server and Net2net Client settings. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Opper Klet Sent: Monday, September 10, 2007 2:09 AM To: [email protected] Subject: Re: [Efw-user] OpenVPN Net2Net problem... On my test setup, the VLAN is as follows: Network: X.X.X.128/25 Broadcast: X.X.X.255 HostMin: X.X.X.129 HostMax: X.X.X.254 Hosts/Net: 126 This is the same as in production (The X.X.X part differs, that's all). In the labo the X.X.X part is actually a screened LAN used to simulate the internet. In both configurations the client PC's can connect to the internet and port forwarding from the internet towards the client machines work fine... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of compdoc Sent: zondag 9 september 2007 23:44 To: [email protected] Subject: Re: [Efw-user] OpenVPN Net2Net problem... So, your two labo machines are client PCs behind the firewalls. I see. You mention "The RED interfaces of the two EFWs are connected to the same switch." On your test setup, is that subnet of the 'same switch' actually X.X.X.219 & X.X.X.250, GW X.X.X.129, and mask 255.255.255.128? Or are you using some other subnet? ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
