Routing both ways over OpenVPN

[peoriaparks]

Anyone who can help me will get a beverage of their choice! All help is greatly appreciated!!!

I can ping the interfaces of both of the Untangle boxes and on the server I have published the routes of the networks on the server side. I have networks on the client side that I need to also route to the server side. I have attached a crude drawing of the network. I have tried setting static routes, etc.... Can't seem to get this one... Can someone help??!?! Thank you in advance!

If you need drawings please let me know... Am I trying to do something this system will not allow me? I have multiple networks on both sides and need to route each way... also the boxes are in router mode...

Sorry for babbling... I have been at this a good chunk of the day...

[sky-knight]

You're in for a long hard slog, to my knowledge, no one has been able to do what you ask.

The only network that will be accessible on the client side device is the network configured in the OpenVPN site. You cannot export additional networks, and you cannot configure additional ranges. Due to this, you cannot add to the routing table to push additional packets.

If this is possible, I'd love to know how to do it as well since the need does show up from time to time.

[donhwyo]

I think there is a bug in the routing that wont allow this. You can choose the vpn as the interface to route to but it never shows in the routing table. The packets that should go out the vpn interface go out the default gateway instead. Been this way threw at least the last few versions since they added the vpn in the drop down. Guess it would be time to fill out a bugzilla. They don't seem to followup from forum posts.

Don

[WebFooL]

http://bugzilla.untangle.com/show_bug.cgi?id=3694

The bug is there just vote for it.

Right now the implemention is splitt tunnel so no route bug.

[donhwyo]

That is not really the same. I have two untangles acting as openvpn servers. I have a linux server connecting to openvpn on the other server to connect the 2 networks. The network is fine from either to the other. However if I connect on the road I can't see both networks. The packets die at the far end untangle because I can't add the needed route back to the other network. (the openvpn address range of the other Untangle) They go out the default gateway instead of threw the vpn interface. Kind of hard to draw a map. The network works very well and even viop flows threw it properly.

THanks,
Don

[WebFooL]

With correct static routes on both systems you should be able to get it to work.

And export list need to have both networks as well.

[donhwyo]

I agree! But it does not like any settings and I have tried. And when you look in the routing table there is no entry for the routes you make.

Don

[donhwyo]

And export list need to have both networks as well.

Maybe I don't understand this? I would need to export all network ranges on both end of the vpn on both servers?

Thanks,
Don

[WebFooL]

Post a screenshot of you export list on the vpn server and post a screenshot on a route print from a connected vpn client.

[donhwyo]

I will do that this evening when I can experiment. I will also try to make a map. I think this is similar to the OP but not much info there.

Thanks for your interest.

Don