Re: [Openvpn-users] Can a remote device connect to an NFS share on the OVPN server?

2022-02-10 Thread Gert Doering
Hi,

On Fri, Feb 11, 2022 at 01:02:18AM +0100, Bo Berglund wrote:
> sudo mount 192.168.119.216:/home/bosse/www/VIDEO /mnt/video
> mount.nfs: access denied by server while mounting
> 192.168.119.216:/home/bosse/www/video

"access denied" means "they have connectivity, but the server config
is disallowing access" -> /etc/exports on the server

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
 Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany g...@greenie.muc.de


signature.asc
Description: PGP signature
___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


[Openvpn-users] Can a remote device connect to an NFS share on the OVPN server?

2022-02-10 Thread Bo Berglund
I am trying to track down a strange NFS connection problem that surfaced
today...

I have two LAN's, one at home using 192.168.119.0/24 and another in a remote
location using 192.168.117.0/24.

On my home LAN I have an Ubuntu 20.04.3 Server which is the OpenVPN server as
well as a file store served out via NFS.

The connection between the two LAN is by way of OpenVPN where the client is the
remote LAN ASUS router and the server is the Ubuntu server on the home LAN.
In order to have bidirectional access I have set up the client connection with a
ccd where there is a routing directive to allow reverse communication from the
home LAN devices to the remote LAN.
It looks like this:
iroute 192.168.117.0 255.255.255.0

And to make that happen there is also a static route added to the home LAN
router which routes traffic towards the remote LAN IP addresses through the
OpenVPN server:

Network IPNetmask   Gateway  Metric Interface
192.168.117.0 255.255.255.0 192.168.119.216  2  LAN

This worked amazingly well when I deployed it yesterday, I can access the
devices on the other LAN from any device on any of the two networks.

But while testing today I found that an Ubuntu machine that was sitting on the
home LAN for a considerable time and was using an NFS share to the file store on
the OpenVPN server now cannot connect to that NFS share anymore after it moed to
the remote LAN.
If I make a manual mount attempt this is what happens:

sudo mount 192.168.119.216:/home/bosse/www/VIDEO /mnt/video
mount.nfs: access denied by server while mounting
192.168.119.216:/home/bosse/www/video

But if I try to mount another NFS share on the home LAN from that Ubuntu machine
it works instantly! That is to an NFS share on a Synology NAS on my home LAN.

This proves that it should be possible to connect also the wanted share on the
OVPN server, but no matter what I tried today it does not happen.

So now I have to ask here if there is a limitation that the OVPN server handling
the tunnel between the two networks cannot also be an NFS server reachable from
a LAN connecting in via VPN???

All of the devices on my home LAN can use the NFS share fully but none on the
remote LAN...

Is there a solution?

-- 
Bo Berglund
Developer in Sweden



___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users