0

I have 3 Linux server, and I created a VPN coneciton between them.

First server:

  • Installed Openvpn server , working but I comment this line push "redirect-gateway def1 bypass-dhcp" becuse I need this connection to specific ip not to whol conneciton
  • This server can rech to the internet for example with this IP 10.1.1.1
  • And can reach to this IP 10.0.5.5 which is the important becuse I only can reach it form this server
  • IP for tunnel 10.8.0.1

Second server

  • Aso installed openvpn and use the client mode to establish with first server
  • Ping between then is OK
  • IP to the internet for example 10.2.2.2
  • IP for tunnel 10.8.0.6
  • I can't access to the 10.0.5.5

The problem:

I need when I ask about 10.0.5.5 to reach it from the second server for that i made tunnel between them and for that i made route like this

For second server: route add -net 10.0.5.5 netmask 255.255.255.255 gw 10.8.0.5 (which is gw for the tunnel in second server)

for the first server: route add -net 10.0.5.5 netmask 255.255.255.255 gw 10.1.1.0 (which is gw for the ethernet for server 1 which i use to reach 10.0.5.5 in usual without problems)

I add also for return in first server:

route add -net 10.0.8.6 netmask 255.255.255.255 gw 10.8.0.2 (which is gw for tunnel in first server)

Unfortunety when I'm ping from second server to 10.0.5.5 there is no response

I made tcpdump in the first server I got there is hit that told 10.8.0.6 > 10.0.5.5 But in third server which is (10.0.5.5) when I made tcpdump there is no hit

I think when I ping form second server (to 10.0.5.5) there is no problem and rech to the first server( tcpdump record that), but there something happend and he can't go from his defult gw (for first server 10.1.1.0) to the third server 10.0.5.5, and i must put a rule for return

I missed up in route in first server ! can any one help me?

Thanks

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.