On Wednesday 29 June 2016 05:41 AM, Josu Lazkano wrote: > Hello, > > Here is a diagram about my setup: http://i65.tinypic.com/2ryj42f.jpg
So why do you not make one a client, and the other a server? Use Client Configuration files for the client. That way, it will always give the same IP address to the client. - Sachin > 2016-06-28 17:31 GMT+02:00 Sachin Garg <[email protected]>: >> On Tuesday 28 June 2016 05:49 AM, Josu Lazkano wrote: >>> Hello again, >>> >>> I configured a site to site OpenVPN with 2 Debian Jessie servers. >>> >>> site1 server: 192.168.1.10/24 >>> site1 router/gw: 192.168.1.1/24 >>> site1 conf: http://paste.debian.net/766912/ >>> site2 server: 192.168.2.10/24 >>> site2 router/gw: 192.168.2.1/24 >>> site2 conf: http://paste.debian.net/766913/ >> >> Am a bit confused by your setup. Can you please provide a brief network >> diagram? I tried the following, but it seems to be wrong :( >> >> +------+ >> | H1 \ 192.168.1.X >> +----+-+\ >> 10.0.0.1 \ +------+ 192.168.1.1 >> | ----| R1 +---------+ >> 10.0.0.2 +---/--+ | >> +-+----+ / | >> | S1 |-----/ V >> +------+192.168.1.10 ******** >> *** IN *** >> ******** >> +------+192.168.2.10 ^ >> | S2 |-----\ | >> +-+----+ \ | >> 10.0.0.2 +---\--+ | >> | ---+ R2 +---------+ >> | / +------+ 192.168.2.1 >> 10.0.0.1 / >> +----+-+/ >> | H2 / 192.168.2.X >> +------+ >> >>> >>> I can ping from site2 server to site1 server: >>> >>> # ping 192.168.1.10 -c 4 >>> PING 192.168.1.10 (192.168.1.10) 56(84) bytes of data. >>> 64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=44.2 ms >>> 64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=46.9 ms >>> 64 bytes from 192.168.1.10: icmp_seq=3 ttl=64 time=41.6 ms >>> 64 bytes from 192.168.1.10: icmp_seq=4 ttl=64 time=43.8 ms >>> >>> --- 192.168.1.10 ping statistics --- >>> 4 packets transmitted, 4 received, 0% packet loss, time 3004ms >>> rtt min/avg/max/mdev = 41.605/44.158/46.980/1.920 ms >>> >>> But could not reach to the other devices in the remote LAN from the server: >>> >>> # ping 192.168.1.1 -c 4 >>> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. >>> >>> --- 192.168.1.1 ping statistics --- >>> 4 packets transmitted, 0 received, 100% packet loss, time 3024ms >>> >>> On both sites I have Mikrotik routers and I add this routes: >>> >>> site1: /ip route add distance=1 dst-address=192.168.2.0/24 >>> gateway=192.168.1.10 pref-src=192.168.1.1 >>> site2: /ip route add distance=1 dst-address=192.168.1.0/24 >>> gateway=192.168.2.10 pref-src=192.168.2.1 >>> >>> >From other devices I can ping to remote devices, and it works well: >>> >>> # ping 192.168.1.25 -c 2 >>> PING 192.168.1.25 (192.168.1.25) 56(84) bytes of data. >>> 64 bytes from 192.168.1.25: icmp_seq=1 ttl=62 time=42.6 ms >>> 64 bytes from 192.168.1.25: icmp_seq=2 ttl=62 time=48.5 ms >>> >>> --- 192.168.1.25 ping statistics --- >>> 2 packets transmitted, 2 received, 0% packet loss, time 1000ms >>> rtt min/avg/max/mdev = 42.600/45.582/48.564/2.982 ms >>> >>> # ping 192.168.1.1 -c 2 >>> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. >>> 64 bytes from 192.168.1.1: icmp_seq=1 ttl=62 time=44.9 ms >>> 64 bytes from 192.168.1.1: icmp_seq=2 ttl=62 time=43.1 ms >>> >>> --- 192.168.1.1 ping statistics --- >>> 2 packets transmitted, 2 received, 0% packet loss, time 1001ms >>> rtt min/avg/max/mdev = 43.189/44.061/44.933/0.872 ms >>> >>> Why I can not reach from the OpenVPN servers to remote devices? Other >>> devices could reach each other. >>> >>> Maybe it is a route problem, but I don't know how to solve it. >>> >>> Thanks for your help. >>> >> >> >> >> ------------------------------------------------------------------------------ >> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San >> Francisco, CA to explore cutting-edge tech and listen to tech luminaries >> present their vision of the future. This family event has something for >> everyone, including kids. Get more information and register today. >> http://sdm.link/attshape >> _______________________________________________ >> Openvpn-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/openvpn-users > > > ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
