Quantcast
Channel: Active questions tagged openvpn - Unix & Linux Stack Exchange
Viewing all articles
Browse latest Browse all 823

Route to LAN subnet via OpenVPN client

$
0
0

I am trying to route to a LAN subnet that is connected via an OpenVPN client.

I am having trouble with the route command - I cannot make sense of it. The OpenVPN link is established and I can ping the client.

When I try to add a route to the LAN subnet on the VPN server, I get this error:

# route add -net 192.168.0.0 netmask 255.255.255.0 gw 10.9.0.6 dev tun0SIOCADDRT: No such process

The routing table for the OpenVPN server has 10.9.0.0/24 in it, so I'm not sure what the problem is.

# routeKernel IP routing tableDestination     Gateway         Genmask         Flags Metric Ref    Use Ifacedefault         ve108.csr2.lga1 0.0.0.0         UG    0      0        0 eth010.9.0.0        10.9.0.2        255.255.255.0   UG    0      0        0 tun010.9.0.2        *               255.255.255.255 UH    0      0        0 tun0204.145.81.0    *               255.255.255.0   U     0      0        0 eth0

More information:

# ip ad sh1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 scope host lo    inet6 ::1/128 scope host        valid_lft forever preferred_lft forever2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether 00:0e:cf:20:c1:24 brd ff:ff:ff:ff:ff:ff    inet 204.145.81.11/24 brd 204.145.81.255 scope global eth0    inet6 fe80::20e:cfff:fe20:c124/64 scope link        valid_lft forever preferred_lft forever3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100    link/none     inet 10.9.0.1 peer 10.9.0.2/32 scope global tun0

Considering that I can ping the VPN client I am trying to route to, I don't understand why I am having this problem. As far as I know I should just be able to add the route.

# ping -c 1 10.9.0.6PING 10.9.0.6 (10.9.0.6) 56(84) bytes of data.64 bytes from 10.9.0.6: icmp_req=1 ttl=64 time=24.0 ms--- 10.9.0.6 ping statistics ---1 packets transmitted, 1 received, 0% packet loss, time 0msrtt min/avg/max/mdev = 24.008/24.008/24.008/0.000 ms

Here is the details from the OpenVPN client, which is connected to the VPN server. The network I am trying to route to is on this client.

# routeKernel IP routing tableDestination     Gateway         Genmask         Flags Metric Ref    Use Ifacedefault         greece-gw.secus 0.0.0.0         UG    2      0        0 eth010.9.0.1        10.9.0.5        255.255.255.255 UGH   0      0        0 tun010.9.0.5        *               255.255.255.255 UH    0      0        0 tun0loopback        localhost       255.0.0.0       UG    0      0        0 lo192.168.0.0     *               255.255.255.0   U     0      0        0 eth1198.50.241.0    *               255.255.255.0   U     0      0        0 eth0

It can reach the VPN server fine:

# ping -c 1 10.9.0.1PING 10.9.0.1 (10.9.0.1) 56(84) bytes of data.64 bytes from 10.9.0.1: icmp_seq=1 ttl=64 time=24.0 ms--- 10.9.0.1 ping statistics ---1 packets transmitted, 1 received, 0% packet loss, time 0msrtt min/avg/max/mdev = 24.017/24.017/24.017/0.000 ms

It has IP forwarding enabled:

# sysctl -a | grep forwardingnet.ipv4.conf.all.forwarding = 1

I've set iptables to allow forwarding:

# iptables -nvL FORWARDChain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target     prot opt in     out     source               destination             0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED    0     0 ACCEPT     all  --  tun0   eth1    0.0.0.0/0            0.0.0.0/0

Here is the config for the interfaces on the client:

# ip ad sh1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 scope host lo       valid_lft forever preferred_lft forever    inet6 ::1/128 scope host        valid_lft forever preferred_lft forever2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether 08:00:27:5f:f2:1e brd ff:ff:ff:ff:ff:ff    inet 198.50.241.113/24 brd 198.50.241.255 scope global eth0       valid_lft forever preferred_lft forever    inet6 fe80::a00:27ff:fe5f:f21e/64 scope link        valid_lft forever preferred_lft forever3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether 08:00:27:c6:b8:fd brd ff:ff:ff:ff:ff:ff    inet 192.168.0.2/24 brd 192.168.0.255 scope global eth1       valid_lft forever preferred_lft forever    inet6 fe80::a00:27ff:fec6:b8fd/64 scope link        valid_lft forever preferred_lft forever4: sit0: <NOARP> mtu 1480 qdisc noop state DOWN     link/sit 0.0.0.0 brd 0.0.0.05: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100    link/none     inet 10.9.0.6 peer 10.9.0.5/32 scope global tun0       valid_lft forever preferred_lft forever

Viewing all articles
Browse latest Browse all 823

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>