Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection. The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Is this proof that it is not going though the VPN?

share|improve this question
    
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel. –  Alex Feb 18 '13 at 20:57
    
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out. –  gparent Feb 18 '13 at 20:58
add comment

2 Answers

up vote 2 down vote accepted

If you're on windows then start a dos window and run the tracert command.

e.g. tracert www.google.com

You can also use an IP address instead of a DNS name.

If you're on Linux you can do the same with the traceroute command.

With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.

share|improve this answer
    
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN? –  monkthemighty Feb 18 '13 at 20:42
    
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN. –  Matt Feb 18 '13 at 20:47
    
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel? –  Alex Feb 18 '13 at 20:49
1  
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN. –  Matt Feb 18 '13 at 20:53
add comment

Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.