Another site to site VPN question

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

andresmorago

Senior Member
Hello.
My apologies in advanced. I know this has been discussed several times but after reading i cant get this to work 100%

My setup

SITE A Router
LAN 10.0.0.1 / 255.255.255.0
VPN Server 10.0.1.0 / 255.255.255.0

1618539607753.png


SITE B Router
LAN 10.0.4.1 / 255.255.255.0
VPN client
Internet traffic is not going through SITE A router (thats ok)
1618540419635.png



My problem
* I am able to ping SITE A router at 10.0.0.1. Other devices in the 10.0.0.0 network are partially accessible (on some ports) but not pingable
* I need SITE B devices to have network 5.103.9.245/22 routed through SITE B. Can you please advice?
 

eibgrad

Very Senior Member
When only *some* devices are reachable, failure to reach other devices is often due to personal firewalls on those devices, esp. Windows machines. They won't accept a *foreign* private network (like that of the VPN tunnel) by default.
 

eibgrad

Very Senior Member
As far needing "SITE B devices to have network 5.103.9.245/22 routed through SITE B", you have "Force internet traffic through tunnel" set to NO in the OpenVPN client, and for good measure, the following in custom config...

Code:
pull-filter ignore redirect-gateway

So nothing other than 10.0.0.0/24 should be accessed over SITEA. Not unless you meant to say 5.103.9.245/22 should be routed over SITEA. If that's the case, you can use a route directive in the OpenVPN client custom config field to make that happen. However, 5.103.9.245/22 is NOT a valid network! You're probably looking for 5.103.8.0/22.

Code:
route 5.103.8.0 255.255.252.0 vpn_gateway

Btw, I'm assuming you mean 5.103.8.0/22 as a destination, NOT a source.
 

andresmorago

Senior Member
thank you so much. i had messed up with the network so the route rule wasnt working as expected.
regarding pings, ill have to see what firewall setups might be interfering
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top