Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm kind of desperate for help here...

So I'm trying to setup a Client Machine to make a VPN Connection accessible to my whole local network.

When I connect directly from a Computer in the local Network to the VPN Server using Viscosity (or Tunnelblick) it works flawlessly and I can interact with all the computers in the remote network, but I'm having trouble setting up the original OpenVPN Client on a Ubuntu Server in my local network, so that all computers in the network can go through a single VPN connection.

The OpenVPN Client can connect, but I can not ping any Servers in the remote Location, not even the VPN Server itself... Not from the OpenVPN Client machine, not from any other machine in the local network...

Does anybody know what i did wrong?

[client-network-router static routing]

192.168.1.0/24 -> 10.201.101.21

[client] /var/log/syslog:

Jun 12 21:21:50 vpn1 ovpn-client[2058]: OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Jun 12 21:21:50 vpn1 ovpn-client[2058]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jun 12 21:21:52 vpn1 ovpn-client[2058]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jun 12 21:21:52 vpn1 ovpn-client[2058]: WARNING: file '/etc/openvpn/easy-rsa2/keys/ben-vpn1.[CENSORED].de.key' is group or others accessible
Jun 12 21:21:52 vpn1 ovpn-client[2058]: Socket Buffers: R=[212992->131072] S=[212992->131072]
Jun 12 21:21:52 vpn1 ovpn-client[2059]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Jun 12 21:21:52 vpn1 ovpn-client[2059]: UDPv4 link local: [undef]
Jun 12 21:21:52 vpn1 ovpn-client[2059]: UDPv4 link remote: [AF_INET][CENSORED]:1194
Jun 12 21:21:52 vpn1 ovpn-client[2059]: TLS: Initial packet from [AF_INET][CENSORED]:1194, sid=569ecf22 b5bcaea1
Jun 12 21:21:52 vpn1 ovpn-client[2059]: VERIFY OK: depth=1, [CENSORED]
Jun 12 21:21:52 vpn1 ovpn-client[2059]: VERIFY OK: nsCertType=SERVER
Jun 12 21:21:52 vpn1 ovpn-client[2059]: VERIFY OK: depth=0, [CENSORED]
Jun 12 21:21:53 vpn1 ovpn-client[2059]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jun 12 21:21:53 vpn1 ovpn-client[2059]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 12 21:21:53 vpn1 ovpn-client[2059]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jun 12 21:21:53 vpn1 ovpn-client[2059]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 12 21:21:53 vpn1 ovpn-client[2059]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Jun 12 21:21:53 vpn1 ovpn-client[2059]: [vpn1.[CENSORED].de] Peer Connection Initiated with [AF_INET][CENSORED]:1194

[server] server.conf:

port 1194

# TCP or UDP server?
;proto tcp
proto udp


dev tap0
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"


ca /etc/openvpn/easy-rsa2/keys/ca.crt
cert /etc/openvpn/easy-rsa2/keys/vpn1.[CENSORED].de.crt
key /etc/openvpn/easy-rsa2/keys/vpn1.[CENSORED].de.key # This file should be kept secret


dh /etc/openvpn/easy-rsa2/keys/dh1024.pem


ifconfig-pool-persist ipp.txt


server-bridge 192.168.1.81 255.255.255.0 192.168.1.200 192.168.1.250


keepalive 10 120


comp-lzo


max-clients 50


user nobody
group nogroup


persist-key
persist-tun


status openvpn-status.log


verb 3

[server & client] up.sh:

#!/bin/sh

BR=$1
DEV=$2
MTU=$3
/sbin/ip link set "$DEV" up promisc on mtu "$MTU"
/sbin/brctl addif $BR $DEV

[server & client] down.sh:

#!/bin/sh

BR=$1
DEV=$2

/sbin/brctl delif $BR $DEV
/sbin/ip link set "$DEV" down

[server] /etc/network/interfaces:

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 192.168.1.81
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.253
dns-nameserver 192.168.1.253 192.168.1.1 

## This is the network bridge declaration

## Start these interfaces on boot
auto lo br0

iface lo inet loopback

iface br0 inet static 
address 192.168.1.81 
netmask 255.255.255.0
gateway 192.168.1.253
bridge_ports eth0

iface eth0 inet manual
up ip link set $IFACE up promisc on
down ip link set $IFACE down promisc off

[client] client.conf:

# TCP or UDP server?
;proto tcp
proto udp

dev tap0
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"

;dev tun

ca /etc/openvpn/easy-rsa2/keys/ca.crt
cert /etc/openvpn/easy-rsa2/keys/ben-vpn1.[CENSORED].de.crt
key /etc/openvpn/easy-rsa2/keys/ben-vpn1.[CENSORED].de.key # This file should be kept secret

client 
remote [CENSORED] 1194
resolv-retry infinite
nobind

keepalive 10 120

ns-cert-type server

comp-lzo

max-clients 50

user nobody
group nogroup

persist-key
persist-tun

status openvpn-status.log

verb 3

[client] /etc/network/interfaces:

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 10.201.101.21
netmask 255.255.255.0
network 10.201.101.0
broadcast 10.201.101.255
gateway 10.201.101.1
dns-nameserver 10.201.101.1

## This is the network bridge declaration

## Start these interfaces on boot
auto lo br0

iface lo inet loopback

iface br0 inet static 
address 10.201.101.21 
netmask 255.255.255.0
gateway 10.201.101.1
bridge_ports eth0

iface eth0 inet manual
up ip link set $IFACE up promisc on
down ip link set $IFACE down promisc off
share|improve this question
    
Out of curiosity, did you try configuring the OpenVPN client using the Network Manager plugin? That's how we configure out clients here, and it's usually quite simple. It is, however, not great for adding a VPN config for lots of machines. –  WildVelociraptor Jun 16 at 19:32
    
well, i use the 14.04 lts server edition, so there's no network manager plugin –  Jessica Jun 17 at 1:38

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.