Hi!
Have you tried the "client-to-client" option in the server config?
Swifty
2010-11-25 21:05 keltezÃssel, Paulo Ricardo Bruck Ãrta:
Hi Guys
After google and ask help at openvpn's forum I'm still w/ no lucky.
Please let me know if there is another forum/email list that could help me.
That's what I have :
Italy ----------------------Brazil HeadQuarter--------------Brazil branch
cisco ipsec debian+racoon+openvpn debian+openvpn
LAN 10.0.0.0/24 LAN 10.54.0.0/24 LAN 10.54.1.0/24
OPENVPN=10.8.0.1 openvpn=10.8.0.2
Italy and headquarter in braszil talk w/ each other without problems
Headquarter and branch in brazil talk w/ each other without problems
branch in Brazil can't talk w/ Italy.
using traceroute from branch I get 10.8.0.1 and stop.
I'm almost certain that it's a route problem but I dont know how to solve.
Any help could be very appreciate.
best regards
route table at headOffice brazil
xx.xx.xx.xx/28 dev eth2 proto kernel scope link src xx.xx.xx.xx
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
10.54.0.0/24 dev eth0 proto kernel scope link src 10.54.0.1
default via xx.xx.xx.xx dev eth2
route table at branch
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.2
10.54.1.0/24 dev eth0 proto kernel scope link src 10.54.1.1
10.0.0.0/24 via 10.8.0.1 dev tun0
yy.yy.yy.yy dev eth1 proto kernel scope link src yy.yy.yy.yy
default via yy.yy.yy.yy dev eth1
ipsec.conf ( HeadOffice Brazil)
spdadd 10.54.0.0/16 10.0.0.0/24 any -P out ipsec
esp/tunnel/xx.xx.xx.xx-ww.ww.ww.ww/require;
spdadd 10.0.0.0/24 10.54.0.0/16 any -P in ipsec
esp/tunnel/ww.ww.ww.ww-xx.xx.xx.xx/require;
PS how can a see route tables inserted by racoon/ipsec?
Paulo Ricardo Bruck
consultor
http://www.contatogs.com.br
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
