`route 192.168.0.0<http://192.168.0.0> 255.255.255.0<http://255.255.255.0>`
should be pushed instead of being set (for the server). `route
10.8.0.0<http://10.8.0.0> 255.255.255.0<http://255.255.255.0>` shouldn't be
necessary. The iroute should be `192.168.0.0 255.255.255.0` instead of `
192.168.0.50<http://192.168.0.50> 255.255.255.0<http://255.255.255.0>`.
________________________________
From: Tom Yan <tom.t...@gmail.com>
Sent: Monday, February 3, 2020 9:56:53 AM
To: openvpn-users@lists.sourceforge.net <openvpn-users@lists.sourceforge.net>;
Leslie Rhorer <lesrho...@att.net>
Subject: Re: [Openvpn-users] IP addresses and routes not correct
topology (net30 vs subnet)
________________________________
From: Leslie Rhorer <lesrho...@att.net>
Sent: Monday, February 3, 2020 9:12:56 AM
To: openvpn-users@lists.sourceforge.net <openvpn-users@lists.sourceforge.net>
Subject: [Openvpn-users] IP addresses and routes not correct
Hello.
I have set up a new openvpn server with (at the moment) one
client. The client is connecting and I can ping or ssh into the remote
machine using the VPN subnet on the server, but the IP address assigned
to the client is not the one I want / requested, and I cannot ping
either remote LAN address from a local machine. I want the server to be
10.8.0.1 (it is) and the client to be 10.8.0.2 (it insists on being
10.8.0.6). I want to be able to route packets through the server to the
remote 192.168.0/24 LAN, and I want to be able to route packets through
teh client to the local 192.168.1/24 LAN. The local address of the
server is 192.168.1.50 and the local address of the client is 192.168.0.50.
What am I doing wrong?
server.conf:
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
dh /etc/openvpn/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
client-config-dir /etc/openvpn/ccd
route 192.168.0.0 255.255.255.0
route 10.8.0.0 255.255.255.0
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append /var/log/openvpn.log
verb 4
ccd/client1:
iroute 192.168.0.50 255.255.255.0
ifconfig-push 10.8.0.2 255.255.255.0
from server:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
default Arris_Router 0.0.0.0 UG 100 0 0 enp6s0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
192.168.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 100 0 0 enp6s0
enp11s0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
ether 60:a4:4c:62:26:9f txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
enp6s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.50 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::a62:66ff:fea1:4093 prefixlen 64 scopeid 0x20<link>
ether 08:62:66:a1:40:93 txqueuelen 1000 (Ethernet)
RX packets 885811309 bytes 1046862075181 (974.9 GiB)
RX errors 0 dropped 570221 overruns 0 frame 0
TX packets 181935750 bytes 61540037881 (57.3 GiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 38 memory 0xd3000000-d37fffff
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 1239 bytes 118102 (115.3 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1239 bytes 118102 (115.3 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.1 netmask 255.255.255.255 destination 10.8.0.2
inet6 fe80::113a:7c2f:805d:f8c6 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
txqueuelen 100 (UNSPEC)
RX packets 5366 bytes 1248192 (1.1 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 8175 bytes 937628 (915.6 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
from client:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 enp3s0
10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun0
10.8.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 enp3s0
192.168.1.0 10.8.0.5 255.255.255.0 UG 0 0 0 tun0
enp3s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.0.50 netmask 255.255.255.0 broadcast 192.168.0.255
inet6 fe80::213:3bff:fe12:6e6a prefixlen 64 scopeid 0x20<link>
ether 00:13:3b:12:6e:6a txqueuelen 1000 (Ethernet)
RX packets 64282 bytes 42419047 (40.4 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 44537 bytes 31063977 (29.6 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 630 bytes 58990 (57.6 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 630 bytes 58990 (57.6 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.6 netmask 255.255.255.255 destination 10.8.0.5
inet6 fe80::9bb2:432c:c4fb:d169 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
txqueuelen 100 (UNSPEC)
RX packets 6781 bytes 542621 (529.9 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 5453 bytes 1258934 (1.2 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
