Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am trying to set up the OpenVPN VMware ESXi Virtual Appliance. I have downloaded and loaded the VM and gotten it running. I am using the web UI at this point with local authentication. I have created a user and I can log into the server from home using that user. I have assigned a static IP to my user, I can see that IP on my local network adapter, and I can ping the IP address of the server (the IP that is internal to the remote site). The problem is I cannot ping anything else on the network. I am trying to do routing, not NAT, because I need seamless access to the entire network (software development/testing purposes). I don't want anything in the middle mucking with my connection. Below are two screenshots showing my configuration:

VPN Settings

VPN Settings Screen

User Settings for My User

User Settings Screen

Any help would be appreciated, I'm pretty new to this stuff and it just doesn't seem like it should be this hard.

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

The routed network you provided, that is a different network, from the LAN the OpenVPN server is running on right?

Have you added a route for VPN network, on the router that all the clients are on that LAN are using for a default gateway?

Since that network is different, the clients on the LAN must know how to get to it, but I would guess the only route they have is their default gateway. So they would not know about or how to reach devices on the other side of the VPN.

The important thing to remember about routing is that you must think about both directions of the traffic. It is easy to add the configuration for getting packets out of a gateway, but overlook the fact, that you have to add configuration to other systems to get the packets too the gateway.

share|improve this answer
    
The IP address of the VM is 10.10.9.9. I'm not sure what you are trying to say (I apologize for my minimal knowledge in this area). Do I need to create a route in the VM, with iptables or something similar? –  Nik Jun 26 '12 at 17:10
    
Well I can give you a lot more detail, if you spend some time describing your network in more detail. What other routers exist, what subnets, what IP addresses are assigned to what router interfaces, and what route tables exist. –  Zoredache Jun 26 '12 at 17:23
    
We're just a small company with a single subnet (10.10.9.0/24). Our "router" is our firewall (one port is the public IP, the other is 10.10.9.1). The VM is 10.10.9.9 (eth0), there is port forwarding in the firewall to pass the OpenVPN stuff through to the VM. When I log in my VPN assigned IP is 10.10.9.81. Everything resides on the 10.10.9.0/24 subnet. –  Nik Jun 26 '12 at 17:37
    
So is the OpenVPN in routed or bridged mode? What IP addresses to the OpenVPN clients get? If it is in routed mode, you cannot use the same subnet for VPN clients as you have defined on your network. If it is in routed mode, you need to add a route for the VPN Client subnet, to your Router 10.10.9.1. –  Zoredache Jun 26 '12 at 17:57
    
I'm not sure what mode it's in and I can't find the config files in the virtual appliance (not sure where to look). I changed it so that clients connect to the 10.10.8.0/24 network. I want to bridge it to the 10.10.9.0/24 network. When I log in as a user, I get a 10.10.8.3 address and I can ping 10.10.8.1 and 10.10.9.9, but not 10.10.9.1. If I show the IP routes on the VM, one of the lines says 10.10.9.0/24 dev eth0 proto kernel scope link src 10.10.9.9, which I thought would route between the networks, but it clearly does not. –  Nik Jun 26 '12 at 22:04
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.