Cannot access computers on network when on VPN

MarianH · July 20, 2016, 12:45pm

yes, eth1 is NS

MarianH · July 20, 2016, 12:51pm

yes, I understand that NS needs to know which is the route … but my question is, what should I change (preferably via GUI) to achieve that. Because as already mentioned, I’ve activated both options - route traffic through vpn & allow client to client network traffic

Alejandro_Guerra · July 20, 2016, 12:57pm

For example:

if the remote site is: client-a and the network is 192.168.0.0 mask 255.255.255.128

so you need into the /etc/openvpn/ccd/ a file

client-a
iroute 192.168.0.0 255.255.255.128

MarianH · July 20, 2016, 12:59pm

sorry … I don’t get that. I was not doing any such changes in the NS.
I’ve only installed it, did some initial setup - everything via GUI.
Do you think it is needed to do some additional setup via command line? Because I thought I can manage everything from GUI

filippo_carletti · July 20, 2016, 1:11pm

You can do everything via GUI.
I think that you have a configuration problem in your network, but I can’t figure that out from the information you gave.
The only viable option I see is to offer to connect to your network to see what’s happening.

Alejandro_Guerra · July 20, 2016, 1:19pm

I already got where set.

In the network address and network mask must configure client network

MarianH · July 20, 2016, 1:23pm

I’ll try. What should I enter there? The address of the network where NS is sitting? So in my case 192.168.10.0?
Or my network where my computer is connected currently 192.168.2.0 (I am at home)

Btw. … what is the 128 at the end of the network mask? Why is it there? Because my network mask is 255.255.255.0

Thank you.

Alejandro_Guerra · July 20, 2016, 1:28pm

Your home 192.168.10.0 mask 255.255.255.0, because which is connected, no?

MarianH · July 20, 2016, 1:32pm

I am at home. My home IP is within 192.168.2.0 and I am connecting with my notebook to the NS.
The NS is in the company and the internal address is within 192.168.10.0, 255.255.255.0
So I suppose, to assure my computer is talking to other computers in the company network, I have to enter (to the fields you mentioned above) 192.168.10.0 & 255.255.255.0, am I right?

Alejandro_Guerra · July 20, 2016, 1:39pm

Sorry the configuration is for 2 NS server.

If you use Win, you must run the openvpn client like administrator, other ways you never conect to the NS server.

MarianH · July 20, 2016, 1:43pm

I understand I have to save those settings to NS. But what should I save there?
Because till now I had this:

Now I have this

and when I try to connect with the second certificate, it connects, however I am even not able to reach the IP of NS.
When I used the first option (without any IP & mask), I could connect at least to the IP of NS.

Alejandro_Guerra · July 20, 2016, 1:46pm

Use this configuration if you want to connect two NS server.

MarianH · July 20, 2016, 1:47pm

Ah … I see. No I want to connect remote laptop (road warrior) to a NS and access the other computers on the local network.
I was just thinking … shouldn’t I have something filled in this tab

Alejandro_Guerra · July 20, 2016, 2:09pm

can you show me ,… advanced?

MarianH · July 20, 2016, 2:30pm

Please see post no. 6 in this thread

MarianH · July 20, 2016, 8:27pm

Thank you for the offer Filippo. I’ll try to re-install the NS during the weekend and based on the result, I’ll let you know.

jgjimenezs · July 20, 2016, 10:26pm