On Tuesday 28 June 2016 05:49 AM, Josu Lazkano wrote:
> Hello again,
>
> I configured a site to site OpenVPN with 2 Debian Jessie servers.
>
> site1 server: 192.168.1.10/24
> site1 router/gw: 192.168.1.1/24
> site1 conf: http://paste.debian.net/766912/
> site2 server: 192.168.2.10/24
> site2 router/gw: 192.168.2.1/24
> site2 conf: http://paste.debian.net/766913/
Am a bit confused by your setup. Can you please provide a brief network
diagram? I tried the following, but it seems to be wrong :(
+------+
| H1 \ 192.168.1.X
+----+-+\
10.0.0.1 \ +------+ 192.168.1.1
| ----| R1 +---------+
10.0.0.2 +---/--+ |
+-+----+ / |
| S1 |-----/ V
+------+192.168.1.10 ********
*** IN ***
********
+------+192.168.2.10 ^
| S2 |-----\ |
+-+----+ \ |
10.0.0.2 +---\--+ |
| ---+ R2 +---------+
| / +------+ 192.168.2.1
10.0.0.1 /
+----+-+/
| H2 / 192.168.2.X
+------+
>
> I can ping from site2 server to site1 server:
>
> # ping 192.168.1.10 -c 4
> PING 192.168.1.10 (192.168.1.10) 56(84) bytes of data.
> 64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=44.2 ms
> 64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=46.9 ms
> 64 bytes from 192.168.1.10: icmp_seq=3 ttl=64 time=41.6 ms
> 64 bytes from 192.168.1.10: icmp_seq=4 ttl=64 time=43.8 ms
>
> --- 192.168.1.10 ping statistics ---
> 4 packets transmitted, 4 received, 0% packet loss, time 3004ms
> rtt min/avg/max/mdev = 41.605/44.158/46.980/1.920 ms
>
> But could not reach to the other devices in the remote LAN from the server:
>
> # ping 192.168.1.1 -c 4
> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
>
> --- 192.168.1.1 ping statistics ---
> 4 packets transmitted, 0 received, 100% packet loss, time 3024ms
>
> On both sites I have Mikrotik routers and I add this routes:
>
> site1: /ip route add distance=1 dst-address=192.168.2.0/24
> gateway=192.168.1.10 pref-src=192.168.1.1
> site2: /ip route add distance=1 dst-address=192.168.1.0/24
> gateway=192.168.2.10 pref-src=192.168.2.1
>
>>From other devices I can ping to remote devices, and it works well:
>
> # ping 192.168.1.25 -c 2
> PING 192.168.1.25 (192.168.1.25) 56(84) bytes of data.
> 64 bytes from 192.168.1.25: icmp_seq=1 ttl=62 time=42.6 ms
> 64 bytes from 192.168.1.25: icmp_seq=2 ttl=62 time=48.5 ms
>
> --- 192.168.1.25 ping statistics ---
> 2 packets transmitted, 2 received, 0% packet loss, time 1000ms
> rtt min/avg/max/mdev = 42.600/45.582/48.564/2.982 ms
>
> # ping 192.168.1.1 -c 2
> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
> 64 bytes from 192.168.1.1: icmp_seq=1 ttl=62 time=44.9 ms
> 64 bytes from 192.168.1.1: icmp_seq=2 ttl=62 time=43.1 ms
>
> --- 192.168.1.1 ping statistics ---
> 2 packets transmitted, 2 received, 0% packet loss, time 1001ms
> rtt min/avg/max/mdev = 43.189/44.061/44.933/0.872 ms
>
> Why I can not reach from the OpenVPN servers to remote devices? Other
> devices could reach each other.
>
> Maybe it is a route problem, but I don't know how to solve it.
>
> Thanks for your help.
>
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
