OpenVPN and IPSEC

Here is my setup:

Location 1)
IPFire 2.23 (x86_64) - Core Update 139
Red - Cable modem
Green 192.168.1.0/24
Blue 192.168.2.0/24

Location 2)
IPFire 2.23 (x86_64) - Core Update 139
Red - Cable modem
Green 192.168.111.0/24
Blue 192.168.112.0/24

Location 1 is connected to location 2 thru IPSEC.

Location 1 has OpenVPN roadwarrior configured with the following subnet 192.168.10.0/255.255.255.0)

Under the “Advanced Server Options” I have entered in the “Route push options” 192.168.111.0/24

Now…
From either location, I can access the other location without any problem.

But, while on the road, I connect my laptop to my network (using the openvpn road warrior client). I can ping any address on the 192.168.1.0 subnet, but none of the address on Location 2 (i.e. 192.168.111.0).

This the output from my laptop:

ping 192.168.111.1
PING 192.168.111.1 (192.168.111.1): 56 data bytes
92 bytes from 192.168.10.1: Destination Net Unreachable
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 d3c9   0 0000  3f  01 ad7f 192.168.10.14  192.168.111.1

Request timeout for icmp_seq 0
92 bytes from 192.168.10.1: Destination Net Unreachable
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 cfa9   0 0000  3f  01 b19f 192.168.10.14  192.168.111.1

Also, I issued the following command on the Location 1 ipfire server:

   [root@ipfirePA sysconfig]# route -n
    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    0.0.0.0         108.52.31.1     0.0.0.0         UG    203    0        0 red0
    108.52.31.0     0.0.0.0         255.255.255.0   U     203    0        0 red0
    192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 green0
    192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 blue0
    192.168.10.0    192.168.10.2    255.255.255.0   UG    0      0        0 tun0
    192.168.10.2    0.0.0.0         255.255.255.255 UH    0      0        0 tun0

Why am I unable to connect to Location 2 when using OpenVPN? I was under the impression (after reading other posts) that the “Route push options” would have allowed that connection.

What am I doing wrong?

Hi,

  1. do you have anything heard abeout " traceroute" ?
  2. it is exactly doing, what you have installed :slight_smile:
    may be IPSec is misconfigured - better not configiured for your wishes!

What helps? -> analyzing the complete traffic (all used IP, all used nodes) und compare with configured IPs/nodes. I am sure you will find the mismatch.

Fred