• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Routing issue on 10.

Scheduled Pinned Locked Moved OpenVPN
8 Posts 4 Posters 1.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    mrosedale
    last edited by Aug 19, 2013, 5:28 PM

    Hello,

    I've set up open vpn. Everything is working perfectly except for one issue. I am using 10.x for my ip address space on the router, and if the person's originating network is also 10.x he can connect, but cannot route traffic properly. Any suggestions for what this might be? Is this a client side issue or something that needs to be set up on the server?

    Thanks,

    1 Reply Last reply Reply Quote 0
    • J
      jimp Rebel Alliance Developer Netgate
      last edited by Aug 19, 2013, 6:48 PM

      If the client's home/remote network overlaps, it will cause problems no matter which net you're in (10/8, 192.168/16, or 172.16/12)

      It's an issue on the client side because the client will believe that the IPs are local to him and thus his workstation will never attempt to use the VPN for those IPs.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • M
        mrosedale
        last edited by Aug 20, 2013, 2:28 PM

        I see, so what needs to be done on the client to get this to work?

        1 Reply Last reply Reply Quote 0
        • J
          jimp Rebel Alliance Developer Netgate
          last edited by Aug 20, 2013, 5:03 PM

          They need to not be in a conflicting network. There isn't anything else you can really do.

          It's either that, or renumber the server side so you're in something else that doesn't conflict.

          One side or the other would need to change IPs. Avoiding overlaps is fairly difficult in this day and age, especially with people who roam all over the planet to various hotels, airports, coffee shops, etc…

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator
            last edited by Aug 21, 2013, 12:48 PM

            So when you say they use 10.x you mean they are using /8 for their mask??  And you are using same ?

            As already stated you can not have overlapping networks on both sides of a vpn without issues.

            But for example at work we use a 10.x.x.x/24 network – something like 10.56.41.0/24 I believe, not sure off the top of my head for desktop segment at my location.

            So if your using say 10.1.2.0/24 and they were using 10.1.3.0/24 you would be fine..  But if they are using a /8 mask or even /16 then yeah its possible your 10.x.x.x/24 could overlap with that.

            Need to change 1 side of the network.  And I would for sure never be using a /8 or /16 mask..  How many hosts do you have??

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • M
              mrosedale
              last edited by Aug 21, 2013, 1:59 PM

              His network is out of my control unfortunately, but he was using 10/24 and we are using 10/13. We need ours for a variety of services including dns that he'd need connected to vpn.

              1 Reply Last reply Reply Quote 0
              • J
                johnpoz LAYER 8 Global Moderator
                last edited by Aug 21, 2013, 4:03 PM Aug 21, 2013, 4:00 PM

                10/24 what?? your missing some info there 10.x.x/24?

                And then your 10/13 – so missing some info 10.x/13  -- if you told me 10/13 I would assume your on an address that falls in the 1st subnet on that so 10.0.0.0 - 10.7.255.255

                So if you tell me 10/24 without any other info I assume 10.0.0/24 -- so you would overlap..

                Now if he is on 10.0.0.0/24 on one side and your on 10.8/13 on the other then your network would be 10.8.0.0 - 10.15.255.255 and you would not be overlapping.

                So your using 10.x/13 -- so you have like 524K+ hosts all on the same network?  A /13 is a LARGE segment.. I find it hard to believe you need such a large network other than bad design.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • M
                  marvosa
                  last edited by Aug 22, 2013, 3:35 PM

                  Pretty simple deal, just have to make sure your LAN segments do not overlap, but we need more info.  10.x is not enough information, we need all the octets and the network mask.

                  1 Reply Last reply Reply Quote 0
                  8 out of 8
                  • First post
                    8/8
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                    This community forum collects and processes your personal information.
                    consent.not_received