Hi, Thanks,its working fine in standalone server,
I'm trying in docker containers it's not working . I found issue this: Vpnserver1 docker container I added below rule Added new table vpn_net to rttables ip rule add from 192.168.255.0/24 table vpn_net 192.168.255.0/24 -- my tunnel network When I add this rule client can intimate the connection to docker1 vpn but from client can ping docker vpn1 ip. When I remove that rule it's working and getting internet from 1st docker vpn2. If I remove that traffic cannot flow to 2nd docker vpn and in that case I won't get internet from 2nd one. On Mon, 25 Feb 2019, 17:46 Jan Just Keijser, <[email protected]> wrote: > Hi, > > On 20/02/19 20:09, saidireddy ranabothu wrote: > > Hi, > > I'm looking for same setup what you said. > > client connects to server vpn1 ; when this client connects (and not > before!) , the server vpn1 in turn becomes a client to server vpn2. All > traffic is then routed from client -> vpn1 -> vpn2 -> internet > > when the client disconnects, I presume the vpn from vpn1 -> vpn2 needs to > be shut down. > > Version details > ***************** > VPN1 server os: CentOS 7 > VPN2 server os:Centos 7 > VPN client: CentOS 7 > > now you state the VPN client is running CentOS 7 - or is it Ubuntu? > > apart from that: > - make sure the vpn from server 1 to server 2 works and is able to route > to the network interfaces on server 2 > - then connect the client to server 1 and route all traffic over the VPN > to server 1 > - figure out which IP you can reach on server 2 from the VPN client; using > ping <IP> to ping various interfaces on vpn servers 1 and 2 and post the > output here. > > J > > > Openvpn version:2.4 > Using Firewalld > > ************************* > Below are my config files > > VPN1 Server: > ********* > > local 192.168.3.251 > port 1194 > proto udp > dev tun > ca /etc/openvpn/ca.crt > cert /etc/openvpn/vpnserver.crt > key /etc/openvpn/vpnserver.key # This file should be kept secret > dh /etc/openvpn/dh2048.pem > topology subnet > server 172.16.255.0 255.255.255.0 > ifconfig-pool-persist ipp.txt > duplicate-cn > keepalive 60 3600 <603600> > tls-auth /etc/openvpn/ta.key 0 # This file is secret > cipher AES-256-CBC > reneg-sec 36000 > comp-lzo > max-clients 100 > persist-key > persist-tun > status /var/log/openvpn/openvpn-status.log > log /var/log/openvpn/openvpn.log > verb 4 > explicit-exit-notify 1 > > *************************************** > > VPN2 Server: > > ********** > > local 192.168.3.42 > port 1194 > proto udp > dev tun > ca /etc/openvpn/ca.crt > cert /etc/openvpn/vpnserver.crt > key /etc/openvpn/vpnserver.key # This file should be kept secret > dh /etc/openvpn/dh2048.pem > topology subnet > server 172.17.254.0 255.255.255.0 > ifconfig-pool-persist ipp.txt > push "redirect-gateway def1 bypass-dhcp" > push "dhcp-option DNS 192.168.3.65" > push "dhcp-option DNS 192.168.3.66" > duplicate-cn > keepalive 60 3600 <603600> > tls-auth /etc/openvpn/ta.key 0 # This file is secret > cipher AES-256-CBC > reneg-sec 36000 > comp-lzo > max-clients 100 > persist-key > persist-tun > status /var/log/openvpn/openvpn-status.log > log /var/log/openvpn/openvpn.log > verb 4 > explicit-exit-notify 1 > > ***************** > > > > > On Wed, 20 Feb 2019, 21:05 Jan Just Keijser, <[email protected]> wrote: > >> Hi, >> >> On 19/02/19 15:54, saidireddy ranabothu wrote: >> >> Hi, >> >> Need help on double openvpn routes, >> >> Mysetup: in Vms >> Client:192.168.56.8 >> >> Vpn1: 192.168.56.5 >> Tun0/10.8.0.1 >> >> Vpn2:192.168.56.6 >> Tun1/10.9.0.1 >> >> I had a internet connectivity in Vpn2 server. >> >> My requirement is: >> Client should connect to vpn1 server and then vpn1 initiates a VPN to >> ovpn2 and from ovpn2 I have to go to internet. >> >> I configured vpn1 and vpn2 with internet >> >> Client configured with vpn1 and vpn2 config files >> >> >> your post is a bit terse... but here's what I understand: >> >> client connects to server vpn1 ; when this client connects (and not >> before!) , the server vpn1 in turn becomes a client to server vpn2. All >> traffic is then routed from client -> vpn1 -> vpn2 -> internet >> >> when the client disconnects, I presume the vpn from vpn1 -> vpn2 needs to >> be shut down. >> >> this is all doable, depending on the OS of the client and the vpn >> servers. Also, it would help if you post openvpn versions and config files. >> >> JJK >> >> >
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
