Topics

1

Other modules / VPN server for interconnecting networks Problem

« on: January 18, 2016, 03:50:41 pm »

Hello,

I have setup a Zentyal-to-Zentyal Server to connect two networks, but i cannot ping a machine which is behind Site A (the zentyal server).

Site A (datacenter, zentyal 4.2)
Zentyal-to-Zentyal VPN Server --> VPN 192.168.160.1
WAN(eth0) --> External Address
LAN(eth1) --> 10.50.73.1
Windows Server --> 10.50.73.10
Advertised Routes -- > openVPN-eth1-10.50.73.0-24, VPN (192.168.160.x, added manually).

Site B (office, zentyal 4.2)
Is connected to the Zentyal-toZentyal VPN server (as client) which is at the datacenter --> VPN 192.168.160.2
WAN(eth0) -->192.168.1.178 (External Address, it is part of our LAN network, temporary).
LAN(eth1) --> 192.168.180.1
Windows 7 (laptop which is connected with the eth1) --> 192.168.180.12
Advertised Routes -- > openVPN-eth0-192.168.1.0, openVPN-eth0-192.168.180.0, VPN (192.168.160.x, added manually).

--------------------------------------------------------------------------------------------
From the Zentyal (Site B) i can ping 10.50.73.1 (Site A, eth1) and 10.50.73.10(Site A, Windows Server).
From the Laptop (Site B) i can ping 10.50.73.1 (Site A, eth1) but not 10.50.73.10 (Site A, Windows Server)

On the Windows 7 laptop(ip: 192.168.180.12, gw: 192.168.180.1):

When i run a tracert to 10.50.73.1 it goes via

1 --> 192.168.180.1
2 --> 10.50.73.1

When i run a tracert to 10.50.73.10 it goes via

1 --> 192.168.180.1
2 --> 192.168.160.1
3 --> Time-out

Why it goes via the 160.1 when i try to reach 10.50.73.10?? because it does not know the 10.50.73.10 ip but it does know the 10.50.73.x network.. so it just sends out via 160.1.

But why?, please help me out.

2

Installation and Upgrades / OpenVPN with Zentyal

« on: November 13, 2015, 09:16:59 am »

Hello,

I have a problem with connecting to my VPN service.

From the home office it is possible to connect to the VPN, it works fine. But as soon as i try to connect from a different location it is not possible to connect!

I tried connecting from several locations but it fails with the following error:

Code: [Select]

Fri Nov 13 09:02:08 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Nov 13 09:02:08 2015 TLS Error: TLS handshake failed
Fri Nov 13 09:02:08 2015 SIGUSR1[soft,tls-error] received, process restarting
The VPN Server is located at a datacenter so it is not locally connected at the Home office.

Stuff i tried:
TCP instead of UDP.
Changed the TAP interface, TUN.
Different port(not 1194).
Add rules to the Windows Firewall.
Turned off the Windows Firewall(i know this is stupid and not a solution but at least i tried).
Turned off IP Tables.
Renew the Certificates.
Yes i run the application as Administrator.
The LOGs on the server do not register the connection from the other location, only from the home office!
Scanned with NMAP the UDP port(1194), yes it is open.

I'm running the OpenVPN Server on a Zentyal server.

I don't know any options, i'm facing this problem for a few days now. Any help would be appreciated, maybe i even  send you a bottle of wine!

Yours faithfully, Rens

3

Installation and Upgrades / VPN Internet Traffic Redirect?

« on: October 23, 2015, 10:52:29 am »

Hello,

I'm setting up a network with the VPN option in Zentyal.

Configuration:

eth0(WAN) -->178.xx.xxx.x(external ip)
eth1(LAN) --> 172.80.0.1 (internal lan)
VPN --> 192.168.160.1/24 (vpn lan)

Problem:

When i connect via my Windows 8 workstation, i can connect fine but all my traffic goes true the VPN server(internet), we dont want that, i want to keep using my local(office) WAN connection.

So at the VPN server configuration(VPN-->Servers-->Config) i unchecked the Redirect gateway option and checked the Network Address Translation and Allow client-to-client connections options. Now indeed i use my own local(office) WAN connection BUT i cannot reach the VPN network(can't ping the 192.168.160.1(while my own ip is 160.2) and i cannot reach the 172.80.0.x network. All of this works when i check the option Redirect the gateway, but than all the internet goes true the VPN connection.

So i think the solution is: Add static routes... but i have no clue what values i must add.....

Best regards,

Rens