Hello, Here is a diagram about my setup: http://i65.tinypic.com/2ryj42f.jpg
Regards. 2016-06-28 17:31 GMT+02:00 Sachin Garg <[email protected]>: > On Tuesday 28 June 2016 05:49 AM, Josu Lazkano wrote: >> Hello again, >> >> I configured a site to site OpenVPN with 2 Debian Jessie servers. >> >> site1 server: 192.168.1.10/24 >> site1 router/gw: 192.168.1.1/24 >> site1 conf: http://paste.debian.net/766912/ >> site2 server: 192.168.2.10/24 >> site2 router/gw: 192.168.2.1/24 >> site2 conf: http://paste.debian.net/766913/ > > Am a bit confused by your setup. Can you please provide a brief network > diagram? I tried the following, but it seems to be wrong :( > > +------+ > | H1 \ 192.168.1.X > +----+-+\ > 10.0.0.1 \ +------+ 192.168.1.1 > | ----| R1 +---------+ > 10.0.0.2 +---/--+ | > +-+----+ / | > | S1 |-----/ V > +------+192.168.1.10 ******** > *** IN *** > ******** > +------+192.168.2.10 ^ > | S2 |-----\ | > +-+----+ \ | > 10.0.0.2 +---\--+ | > | ---+ R2 +---------+ > | / +------+ 192.168.2.1 > 10.0.0.1 / > +----+-+/ > | H2 / 192.168.2.X > +------+ > >> >> I can ping from site2 server to site1 server: >> >> # ping 192.168.1.10 -c 4 >> PING 192.168.1.10 (192.168.1.10) 56(84) bytes of data. >> 64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=44.2 ms >> 64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=46.9 ms >> 64 bytes from 192.168.1.10: icmp_seq=3 ttl=64 time=41.6 ms >> 64 bytes from 192.168.1.10: icmp_seq=4 ttl=64 time=43.8 ms >> >> --- 192.168.1.10 ping statistics --- >> 4 packets transmitted, 4 received, 0% packet loss, time 3004ms >> rtt min/avg/max/mdev = 41.605/44.158/46.980/1.920 ms >> >> But could not reach to the other devices in the remote LAN from the server: >> >> # ping 192.168.1.1 -c 4 >> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. >> >> --- 192.168.1.1 ping statistics --- >> 4 packets transmitted, 0 received, 100% packet loss, time 3024ms >> >> On both sites I have Mikrotik routers and I add this routes: >> >> site1: /ip route add distance=1 dst-address=192.168.2.0/24 >> gateway=192.168.1.10 pref-src=192.168.1.1 >> site2: /ip route add distance=1 dst-address=192.168.1.0/24 >> gateway=192.168.2.10 pref-src=192.168.2.1 >> >>>From other devices I can ping to remote devices, and it works well: >> >> # ping 192.168.1.25 -c 2 >> PING 192.168.1.25 (192.168.1.25) 56(84) bytes of data. >> 64 bytes from 192.168.1.25: icmp_seq=1 ttl=62 time=42.6 ms >> 64 bytes from 192.168.1.25: icmp_seq=2 ttl=62 time=48.5 ms >> >> --- 192.168.1.25 ping statistics --- >> 2 packets transmitted, 2 received, 0% packet loss, time 1000ms >> rtt min/avg/max/mdev = 42.600/45.582/48.564/2.982 ms >> >> # ping 192.168.1.1 -c 2 >> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. >> 64 bytes from 192.168.1.1: icmp_seq=1 ttl=62 time=44.9 ms >> 64 bytes from 192.168.1.1: icmp_seq=2 ttl=62 time=43.1 ms >> >> --- 192.168.1.1 ping statistics --- >> 2 packets transmitted, 2 received, 0% packet loss, time 1001ms >> rtt min/avg/max/mdev = 43.189/44.061/44.933/0.872 ms >> >> Why I can not reach from the OpenVPN servers to remote devices? Other >> devices could reach each other. >> >> Maybe it is a route problem, but I don't know how to solve it. >> >> Thanks for your help. >> > > > > ------------------------------------------------------------------------------ > Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San > Francisco, CA to explore cutting-edge tech and listen to tech luminaries > present their vision of the future. This family event has something for > everyone, including kids. Get more information and register today. > http://sdm.link/attshape > _______________________________________________ > Openvpn-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openvpn-users -- Josu Lazkano ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
