Hello Max, Yes, the problem is with the servers, they could not reach to other site devices.
I try to add the routing you suggest me, but it doesn't work. It is something with the routing, but I don't know how to manage it. Regards. 2016-07-01 12:19 GMT+02:00 <[email protected]>: > As I understood, the OpenVPN connection did work, only problem was, that the > OpenVPN servers could not reach the network. > So I just addressed that issue... > > Just for my information: > > Did you try the solution I suggested (add the missing routing in the gateway > routers)? > > > > > Gesendet: Freitag, 01. Juli 2016 um 12:03 Uhr > Von: "Josu Lazkano" <[email protected]> > An: "Sachin Garg" <[email protected]> > Cc: [email protected] > Betreff: Re: [Openvpn-users] Routing OpenVPN server > Thanks Sachin, > > I want to do it a as site to site configuration. > > Regards. > > 2016-06-30 0:24 GMT+02:00 Sachin Garg <[email protected]>: >> On Wednesday 29 June 2016 05:41 AM, Josu Lazkano wrote: >>> Hello, >>> >>> Here is a diagram about my setup: http://i65.tinypic.com/2ryj42f.jpg >> >> So why do you not make one a client, and the other a server? Use Client >> Configuration files for the client. That way, it will always give the >> same IP address to the client. >> >> - Sachin >> >>> 2016-06-28 17:31 GMT+02:00 Sachin Garg <[email protected]>: >>>> On Tuesday 28 June 2016 05:49 AM, Josu Lazkano wrote: >>>>> Hello again, >>>>> >>>>> I configured a site to site OpenVPN with 2 Debian Jessie servers. >>>>> >>>>> site1 server: 192.168.1.10/24 >>>>> site1 router/gw: 192.168.1.1/24 >>>>> site1 conf: http://paste.debian.net/766912/ >>>>> site2 server: 192.168.2.10/24 >>>>> site2 router/gw: 192.168.2.1/24 >>>>> site2 conf: http://paste.debian.net/766913/ >>>> >>>> Am a bit confused by your setup. Can you please provide a brief network >>>> diagram? I tried the following, but it seems to be wrong :( >>>> >>>> +------+ >>>> | H1 \ 192.168.1.X >>>> +----+-+\ >>>> 10.0.0.1 \ +------+ 192.168.1.1 >>>> | ----| R1 +---------+ >>>> 10.0.0.2 +---/--+ | >>>> +-+----+ / | >>>> | S1 |-----/ V >>>> +------+192.168.1.10 ******** >>>> *** IN *** >>>> ******** >>>> +------+192.168.2.10 ^ >>>> | S2 |-----\ | >>>> +-+----+ \ | >>>> 10.0.0.2 +---\--+ | >>>> | ---+ R2 +---------+ >>>> | / +------+ 192.168.2.1 >>>> 10.0.0.1 / >>>> +----+-+/ >>>> | H2 / 192.168.2.X >>>> +------+ >>>> >>>>> >>>>> I can ping from site2 server to site1 server: >>>>> >>>>> # ping 192.168.1.10 -c 4 >>>>> PING 192.168.1.10 (192.168.1.10) 56(84) bytes of data. >>>>> 64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=44.2 ms >>>>> 64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=46.9 ms >>>>> 64 bytes from 192.168.1.10: icmp_seq=3 ttl=64 time=41.6 ms >>>>> 64 bytes from 192.168.1.10: icmp_seq=4 ttl=64 time=43.8 ms >>>>> >>>>> --- 192.168.1.10 ping statistics --- >>>>> 4 packets transmitted, 4 received, 0% packet loss, time 3004ms >>>>> rtt min/avg/max/mdev = 41.605/44.158/46.980/1.920 ms >>>>> >>>>> But could not reach to the other devices in the remote LAN from the >>>>> server: >>>>> >>>>> # ping 192.168.1.1 -c 4 >>>>> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. >>>>> >>>>> --- 192.168.1.1 ping statistics --- >>>>> 4 packets transmitted, 0 received, 100% packet loss, time 3024ms >>>>> >>>>> On both sites I have Mikrotik routers and I add this routes: >>>>> >>>>> site1: /ip route add distance=1 dst-address=192.168.2.0/24 >>>>> gateway=192.168.1.10 pref-src=192.168.1.1 >>>>> site2: /ip route add distance=1 dst-address=192.168.1.0/24 >>>>> gateway=192.168.2.10 pref-src=192.168.2.1 >>>>> >>>>> >From other devices I can ping to remote devices, and it works well: >>>>> >>>>> # ping 192.168.1.25 -c 2 >>>>> PING 192.168.1.25 (192.168.1.25) 56(84) bytes of data. >>>>> 64 bytes from 192.168.1.25: icmp_seq=1 ttl=62 time=42.6 ms >>>>> 64 bytes from 192.168.1.25: icmp_seq=2 ttl=62 time=48.5 ms >>>>> >>>>> --- 192.168.1.25 ping statistics --- >>>>> 2 packets transmitted, 2 received, 0% packet loss, time 1000ms >>>>> rtt min/avg/max/mdev = 42.600/45.582/48.564/2.982 ms >>>>> >>>>> # ping 192.168.1.1 -c 2 >>>>> PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. >>>>> 64 bytes from 192.168.1.1: icmp_seq=1 ttl=62 time=44.9 ms >>>>> 64 bytes from 192.168.1.1: icmp_seq=2 ttl=62 time=43.1 ms >>>>> >>>>> --- 192.168.1.1 ping statistics --- >>>>> 2 packets transmitted, 2 received, 0% packet loss, time 1001ms >>>>> rtt min/avg/max/mdev = 43.189/44.061/44.933/0.872 ms >>>>> >>>>> Why I can not reach from the OpenVPN servers to remote devices? Other >>>>> devices could reach each other. >>>>> >>>>> Maybe it is a route problem, but I don't know how to solve it. >>>>> >>>>> Thanks for your help. >>>>> >>>> >>>> >>>> >>>> >>>> ------------------------------------------------------------------------------ >>>> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San >>>> Francisco, CA to explore cutting-edge tech and listen to tech luminaries >>>> present their vision of the future. This family event has something for >>>> everyone, including kids. Get more information and register today. >>>> http://sdm.link/attshape >>>> _______________________________________________ >>>> Openvpn-users mailing list >>>> [email protected] >>>> https://lists.sourceforge.net/lists/listinfo/openvpn-users >>> >>> >>> >> >> >> >> >> ------------------------------------------------------------------------------ >> Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San >> Francisco, CA to explore cutting-edge tech and listen to tech luminaries >> present their vision of the future. This family event has something for >> everyone, including kids. Get more information and register today. >> http://sdm.link/attshape >> _______________________________________________ >> Openvpn-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/openvpn-users > > > > -- > Josu Lazkano > > ------------------------------------------------------------------------------ > Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San > Francisco, CA to explore cutting-edge tech and listen to tech luminaries > present their vision of the future. This family event has something for > everyone, including kids. Get more information and register today. > http://sdm.link/attshape > _______________________________________________ > Openvpn-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openvpn-users > > -- Josu Lazkano ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
