Thursday, March 28, 2019

[HELP] Site-to-Site VPN Tunnel Question

Hi everyone,

I'm having trouble configuring a site-to-site tunnel with OpenVPN to connect two small offices into a "single" LAN, using a routed IP tunnel. I have two CentOS machines, a server and a client. For the sake of simplicity, lets say server is on subnet 192.168.10.0/24 while the client is on 192.168.20.0/24.

In the server config file I have added the option to push "route 192.168.20.0 255.255.255.0" and I can ping any device from the server without an issue. However, I am unable to ping any of the 192.168.20.x devices from any 192.168.10.x device that isn't the server itself.

I have also created a ccd/client file and added

iroute 192.168.10.0 255.255.255.0 ifconfig-push 10.10.0.10 255.255.255.0 

Are there any additional routes I need to configure? Does it need to be added on every single machine on both subnets? I don't mind doing the leg work at all but I am not sure what would be the next step. I'd prefer to avoid tinkering with the routers as they're heavily locked down by ISPs here.

Thanks in advance



No comments:

Post a Comment