Answer the question
In order to leave comments, you need to log in
How to help VPN clients see each other?
Greetings.
There are three cars. On one of them, the VPN server, on the other RDP server, on the third RDP client. It is necessary that from the third machine to be connected on the second. I still managed to raise the tunnels, but the machines do not see each other, even the server. Tell me what I missed?
Server config
port 1194
proto udp
dev tun
ca keys/ca.crt
cert keys/server.crt
dh keys/dh4096.pem
server 192.168.10.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log
verb 4
client
remote vpn.example.com
dev tun
nobind
persist-key
persist-tun
keepalive 3 10
fragment 1400
verb 2
log-append openvpn.log
cipher BF-CBC
ca [inline]
cert [inline]
key [inline]
comp-lzo
askpass pass
<ca>
...
</ca>
<key>
....
</key>
<cert>
...
</cert>
$ ifconfig tun0
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:192.168.10.6 P-t-P:192.168.10.5 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
$ route
Таблица маршутизации ядра протокола IP
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.1.1 0.0.0.0 UG 0 0 0 wlan0
192.168.1.0 * 255.255.255.0 U 9 0 0 wlan0
192.168.10.0 192.168.10.5 255.255.255.0 UG 0 0 0 tun0
192.168.10.5 * 255.255.255.255 UH 0 0 0 tun0
Answer the question
In order to leave comments, you need to log in
does tcpdump see pings on the server?
fragment must be specified on both sides
Is the forward in the kernel on the OVPN server enabled?echo "1" > /proc/sys/net/ipv4/ip_forward
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question