Author Topic: Problem with OpenVPN module  (Read 1759 times)

karkun

  • Zen Apprentice
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Problem with OpenVPN module
« on: April 25, 2008, 05:13:40 am »
Hi
I have a problem with VPN-module at work with several networks.

My setup:
eth0 internal 10.1.1.117/16
eth1 external 195.x.x.x

(network 192.168.3.0/24)-----[192.168.3.1/24 | Cisco | 10.1.1.2/16]-----(network 10.1.0.0/16)-----[10.1.1.117/16 | ebox | 195.x.x.x]-----[client]

Ebox accepts vpn connections with no problems.
Ebox can ping all PC in 10.1.0.0/16 and 192.168.3.0/24 network.
Client can ping all PC in 10.1.0.0/16 network, but can't access to 192.168.3.0/24 network.
I need access to 192.168.3.0/24 network.

sixstone

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1417
  • Karma: +26/-0
    • View Profile
    • Sixstone's blog
Re: Problem with OpenVPN module
« Reply #1 on: April 25, 2008, 09:30:23 am »
Have you advertised the 192.168.3.0/24 network? To do so, you must edit the VPN server to add such network. Furthermore, it is possible that the VPN client cannot connect to that network because that network does not know how to reach the VPN client.

Check this post http://forum.eboxplatform.com/index.php?topic=244.0 for details.

Hope this helps.
My secret is my silence...

karkun

  • Zen Apprentice
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Problem with OpenVPN module
« Reply #2 on: April 28, 2008, 04:58:34 am »
All has been adjusted, but did not work  ???
All works after removal of all routes and their adjustment anew...

ribaraki

  • Zen Apprentice
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Problem with OpenVPN module
« Reply #3 on: May 05, 2008, 08:13:32 pm »
I am having exactly the same problem, has somebody solved this issue?

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: Problem with OpenVPN module
« Reply #4 on: May 06, 2008, 08:56:28 am »
ribarki: are you sure that the internal network have a return route to the client?