VPN Network is not routing via tunnel

chpalmer

In your second picture.. You need to add your LAN to the Remote Networks of that site. 10.0.11.0/24

Ive got this same scenario between a radio station I do work for and my office.

Rico

...this is what I just said right? ;-)

-Rico

chpalmer

@rico

Missed that. Yep. I hate this laptop.

chpalmer

@chpalmer

Looking again your radio station router should not have its own LAN in the "remote networks" entry..

Chris-The-Tuner

Yep that eas the problem.
I just mapped the traffic from my LAN to the IP i get from the VPN Server so that i show up as a Single VPN Client and not as a LAN workstation.

Works fine now :)

Thank you very mutch !

Rico

So you do NAT now?
That is not ideal but can work in some cases. :-)

-Rico

Chris-The-Tuner

The Admin does not want to let traffic from my LAN pass, so thats the only way i have.

Sure its not ideal but hey, its getting the job done.

chpalmer

@chris-the-tuner said in VPN Network is not routing via tunnel:

The Admin does not want to let traffic from my LAN pass, so thats the only way i have.

Actually a correctly built firewall rule at the radio station only allowing you workstation IP would do the job just as well. In fact if your not accessing you LAN from any of the other sites Id delete the firewall rule on your local router on the OpenVPN tab.

Chris-The-Tuner

I do access my home LAN via a Server running on my pfs ;)

chpalmer

I believe you could also place your local workstation at an address such as .129 and then use x.x.x.128/30 on the radio station side "remote network" to limit the size of your network their router sees. I have not tried this but there seems no reason it would not work.

chpalmer

@chris-the-tuner said in VPN Network is not routing via tunnel:

I do access my home LAN via a Server running on my pfs ;)

Then adjust your local OpenVPN rule to the data center server network to your local LAN.

Firewall rules are your friend!

chpalmer

Remember that connections that are initiated by the allowed end are by proxy allowed to return. You do not need special WAN rules to allow return traffic from the web.. right? Same with any interface.

Chris-The-Tuner

I got a Rule that sorts out traffic trying to connect to my LAN from the radio network.
For the rest its fine since i run the other network anyway