Hi,
On 20/02/19 20:09, saidireddy ranabothu wrote:
Hi,
I'm looking for same setup what you said.
client connects to server vpn1 ; when this client connects (and not
before!) , the server vpn1 in turn becomes a client to server vpn2.
All traffic is then routed from client -> vpn1 -> vpn2 -> internet
when the client disconnects, I presume the vpn from vpn1 -> vpn2 needs
to be shut down.
Version details
*****************
VPN1 server os: CentOS 7
VPN2 server os:Centos 7
VPN client: CentOS 7
now you state the VPN client is running CentOS 7 - or is it Ubuntu?
apart from that:
- make sure the vpn from server 1 to server 2 works and is able to route
to the network interfaces on server 2
- then connect the client to server 1 and route all traffic over the VPN
to server 1
- figure out which IP you can reach on server 2 from the VPN client;
using ping <IP> to ping various interfaces on vpn servers 1 and 2 and
post the output here.
J
Openvpn version:2.4
Using Firewalld
*************************
Below are my config files
VPN1 Server:
*********
local 192.168.3.251 <http://192.168.3.251>
port 1194 <tel:1194>
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpnserver.crt
key /etc/openvpn/vpnserver.key # This file should be kept secret
dh /etc/openvpn/dh2048 <tel:2048>.pem
topology subnet
server 172.16.255.0 <http://172.16.255.0> 255.255.255.0
<http://255.255.255.0>
ifconfig-pool-persist ipp.txt
duplicate-cn
keepalive 60 3600 <tel:603600>
tls-auth /etc/openvpn/ta.key 0 # This file is secret
cipher AES-256-CBC
reneg-sec 36000 <tel:36000>
comp-lzo
max-clients 100
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 4
explicit-exit-notify 1
***************************************
VPN2 Server:
**********
local 192.168.3.42 <http://192.168.3.42>
port 1194 <tel:1194>
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpnserver.crt
key /etc/openvpn/vpnserver.key # This file should be kept secret
dh /etc/openvpn/dh2048 <tel:2048>.pem
topology subnet
server 172.17.254.0 <http://172.17.254.0> 255.255.255.0
<http://255.255.255.0>
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.3.65 <http://192.168.3.65>"
push "dhcp-option DNS 192.168.3.66 <http://192.168.3.66>"
duplicate-cn
keepalive 60 3600 <tel:603600>
tls-auth /etc/openvpn/ta.key 0 # This file is secret
cipher AES-256-CBC
reneg-sec 36000 <tel:36000>
comp-lzo
max-clients 100
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 4
explicit-exit-notify 1
*****************
On Wed, 20 Feb 2019, 21:05 Jan Just Keijser, <[email protected]
<mailto:[email protected]>> wrote:
Hi,
On 19/02/19 15:54, saidireddy ranabothu wrote:
Hi,
Need help on double openvpn routes,
Mysetup: in Vms
Client:192.168.56.8
Vpn1: 192.168.56.5
Tun0/10.8.0.1 <http://10.8.0.1>
Vpn2:192.168.56.6
Tun1/10.9.0.1 <http://10.9.0.1>
I had a internet connectivity in Vpn2 server.
My requirement is:
Client should connect to vpn1 server and then vpn1 initiates a
VPN to ovpn2 and from ovpn2 I have to go to internet.
I configured vpn1 and vpn2 with internet
Client configured with vpn1 and vpn2 config files
your post is a bit terse... but here's what I understand:
client connects to server vpn1 ; when this client connects (and
not before!) , the server vpn1 in turn becomes a client to server
vpn2. All traffic is then routed from client -> vpn1 -> vpn2 ->
internet
when the client disconnects, I presume the vpn from vpn1 -> vpn2
needs to be shut down.
this is all doable, depending on the OS of the client and the vpn
servers. Also, it would help if you post openvpn versions and
config files.
JJK
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
