Home / server / Questions / 376221
Accepted
Jonas Schnelli
Asked: 2012-04-04 01:59:37 +0800 CST

private subnet nat (openvpn / racoon)

  • 772

I have a openvpn subnet 10.8.0.0/24 running one server and one client (laptop). openvpn works fine. Browsing the web over openvpn from the laptop works also fine.

Now on the server there is a private subnet with 10.7.8.128/28. The subnet is set up with racoon (IPSEC s2s vpn). The s2s vpn allows me to access the subnet 10.3.5.0/24 at the other s2s vpn end. Works all fine when I'm connected with ssh to my server.

From my laptop i can ping 10.7.8.129 (the servers ipsec local ip) but i cannot reach the net 10.3.5.0/24.

I tried to add a static route on my laptop 10.3.5.0/24 over gw 10.7.8.129 with no success.

Any ideas how i do setup the nat / routing?

Thanks

routing openvpn nat iptables racoon

1 Answers

  1. Best Answer

    Most likely, the 10.3.5.0/24 network doesn't know who you are and how to get to you.

    You need to add the route for 10.8.0.0/24 with gateway 10.7.8.129 to the router for the 10.3.5.0/24 network. You may also need to add an IPSEC rule to encrypt traffic destined for 10.8.0.0/24.

    Additional routes may also be required, depending on your network topology.

    • 1