Another site to site VPN question

[andresmorago]

Hello.
My apologies in advanced. I know this has been discussed several times but after reading i cant get this to work 100%

My setup

SITE A Router
LAN 10.0.0.1 / 255.255.255.0
VPN Server 10.0.1.0 / 255.255.255.0

SITE B Router
LAN 10.0.4.1 / 255.255.255.0
VPN client
Internet traffic is not going through SITE A router (thats ok)

My problem
* I am able to ping SITE A router at 10.0.0.1. Other devices in the 10.0.0.0 network are partially accessible (on some ports) but not pingable
* I need SITE B devices to have network 5.103.9.245/22 routed through SITE B. Can you please advice?

 

[eibgrad]

When only *some* devices are reachable, failure to reach other devices is often due to personal firewalls on those devices, esp. Windows machines. They won't accept a *foreign* private network (like that of the VPN tunnel) by default.

 

[eibgrad]

As far needing "SITE B devices to have network 5.103.9.245/22 routed through SITE B", you have "Force internet traffic through tunnel" set to NO in the OpenVPN client, and for good measure, the following in custom config...

pull-filter ignore redirect-gateway

So nothing other than 10.0.0.0/24 should be accessed over SITEA. Not unless you meant to say 5.103.9.245/22 should be routed over SITEA. If that's the case, you can use a route directive in the OpenVPN client custom config field to make that happen. However, 5.103.9.245/22 is NOT a valid network! You're probably looking for 5.103.8.0/22.

route 5.103.8.0 255.255.252.0 vpn_gateway

Btw, I'm assuming you mean 5.103.8.0/22 as a destination, NOT a source.

 

[andresmorago]

thank you so much. i had messed up with the network so the route rule wasnt working as expected.
regarding pings, ill have to see what firewall setups might be interfering