Hub & Spoke Setup using pf2.1 - No Communication Between Spokes
-
I have 3 sites currently. One site is the master "hub", the others are the "spokes". I can access the hub just fine from both of the spoke networks, but the spoke networks can't communicate with each other. I've been using shared keys with separate server instances on the hub for each spoke. The hub can access all the networks without issue. Here's the configuration:
Site 1 [Hub]
IP: 10.0.0.1/24
VPN to Site 2
Port: 1194
ovpn tun1 IP: 10.0.40.1/24
"IPv4 Local Network/s": 10.0.0.0/24,10.0.20.0/24
"IPv4 Remote Network/s": 10.0.1.0/24
VPN to Site 3
Port: 1199
ovpn tun2 IP: 10.0.41.1/24
"IPv4 Local Network/s": 10.0.0.0/24,10.0.1.0/24
"IPv4 Remote Network/s": 10.0.20.0/24Site 2
IP: 10.0.1.1/24
ovpn tun1 IP: 10.0.40.2/24
"IPv4 Remote Network/s": 10.0.0.0/24,10.0.20.0/24Site 3
IP: 10.0.20.1/24
ovpn tun2 IP: 10.0.41.2/24
"IPv4 Remote Network/s": 10.0.0.0/24,10.0.1.0/24Any suggestions/tips? Thanks.
-
You need to add specific "hub&spoke" OpenVPN commands.
Take a look here
http://www.secure-computing.net/wiki/index.php/OpenVPN/Routing -
Just as you posted your reply vielfede, I seemed to have fixed my own issue. Under "IPv4 Local Network/s" I removed the opposite spoke's subnet. I then rebooted all of the units and everything seemed to run perfectly fine. Thanks for your tip, though! I'll read through that anyhow so that I can become more familiar with OpenVPN.