I have a VPS.
It't got 4 interfaces defined
REAL: eth0 X.X.X.100/32
DUMMY: dummy0 10.1.0.100/24
TUN: tun1 10.254.254.1
LO: lo 127.0.0.1/8
It's connected over a VPN to a remote machine at my office. That machine has 4
interfaces defined.
REAL: eth0 Y.Y.Y.100/29
REAL: eth1 10.2.0.100/24
TUN: tun1 10.254.254.2
LO: lo 127.0.0.1/8
The openVPN config on the VPS has
cat /etc/openvpn/openvpn-server.conf
...
ccd-exclusive
client-config-dir ccd/
route 10.2.0.0 255.255.255.0
push "route 10.2.0.0 255.255.255.0"
client-to-client
...
and
cat /etc/openvpn/ccd/openvpn-office-client.conf
iroute 10.2.0.0 255.255.255.0
With this config on the VPS, the after-openvpn-start defined routes include
ip route show | egrep 1"72|default"
default via X.X.X.100 dev eth0
10.1.0.0/24 dev dummy0 proto kernel scope link src
10.1.0.100
10.2.0.0/24 via 10.254.254.2 dev tun1
On the VPS,
I can ping locally TO the *local* vpn endpoint FROM the dummy interface
ping -c 1 -I 10.1.0.100 10.254.254.1
PING 10.254.254.1 (10.254.254.1) from 10.1.0.100 : 56(84) bytes
of data.
64 bytes from 10.254.254.1: icmp_seq=1 ttl=64 time=0.128 ms
--- 10.254.254.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.128/0.128/0.128/0.000 ms
and, I can ping across the vpn tunnel from the vpn endpoint
ping -c 1 -I 10.254.254.1 10.2.0.100
PING 10.2.0.100 (10.2.0.100) from 10.254.254.1 : 56(84) bytes
of data.
64 bytes from 10.2.0.100: icmp_seq=1 ttl=64 time=48.2 ms
--- 10.2.0.100 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 48.255/48.255/48.255/0.000 ms
but I can't ping FROM the dummy interface across the vpn tunnel to the lan on
the other side
ping -c 1 -I 10.1.0.100 10.2.0.100
PING 10.2.0.100 (10.2.0.100) from 10.1.0.100 : 56(84) bytes of
data.
--- 10.2.0.100 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms
What route in the config is missing to allow that ping?
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
