so here goes....
I have 2 sites.. Site A at home and Site B is my office space in town.
Site A has a 1gb symmetrical link, with a public static IP , with a peplink Balacnce 310x-56 router and a couple of asus routers behind it running mainly AP's
Site B has a 2gb symmetrical link with a public static IP, with a asus GT-be98 pro router
Site A is a 192.168.0.x /24 network running DHCP 192.168.0.100-200
Site B is a 10.10.10.x /24 network running DHCP 10.10.10.100-200 (I have renumbered this net a couple of different ways, so far no luck)
Site A is running the openvpn server
Site B is trying to connect to said openvpn server with no luck.. ) (Error IP routing conflict) one reason I renumbered just in case.
When at site A .. I would want to route all traffic out to the internet, except for the 10 traffic, that should use the split tunnel
What at site B I would want to routh all traffic out to the internet, except for the 192 traffic
Since I can't get the speed fusion to connect I can't do anything.. lol
I can with the openvpn client connect from my laptop to the peplink openvp server with either the split tunneling, or route all traffic just fine.
The sys log from the asus side hasn't been much help.... I am sure I am just missing something simple? but thought I would reach out to see if some fresh perspective helps..
thanks for looking at it
Apr 10 15:05:48 vpnclient5[26554]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
Apr 10 15:05:48 vpnclient5[26554]: [OpenVPN Server/emailAddress=support@peplink.com] Peer Connection Initiated with [AF_INET]xxxxxxx:1194
Apr 10 15:05:49 vpnclient5[26554]: SENT CONTROL [OpenVPN Server/emailAddress=support@peplink.com]: 'PUSH_REQUEST' (status=1)
Apr 10 15:05:50 vpnclient5[26554]: PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 192.168.0.254,route 192.168.0.0 255.255.255.0,dhcp-option DNS 192.168.0.254,ping 10,ping-restart 120,ifconfig 192.168.0.184 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: timers and/or timeouts modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: --ifconfig/up options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: route options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: route-related options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: peer-id set
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: adjusting link_mtu to 1624
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: data channel crypto options modified
Apr 10 15:05:50 vpnclient5[26554]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Apr 10 15:05:50 vpnclient5[26554]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Apr 10 15:05:50 vpnclient5[26554]: TUN/TAP device tun15 opened
Apr 10 15:05:50 vpnclient5[26554]: TUN/TAP TX queue length set to 100
Apr 10 15:05:50 vpnclient5[26554]: /sbin/ifconfig tun15 192.168.0.184 netmask 255.255.255.0 mtu 1500 broadcast 192.168.0.255
Apr 10 15:05:50 vpnclient5[26554]: /etc/openvpn/ovpnc-up 5 tun15 1500 1552 192.168.0.184 255.255.255.0 init
Apr 10 15:05:52 vpnclient5: WARNING: Ignore conflicted routing rule: 192.168.0.0 255.255.255.0 gw 192.168.0.254
Apr 10 15:05:52 vpnclient5[26554]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Apr 10 15:05:52 vpnclient5[26554]: Initialization Sequence Completed
I have 2 sites.. Site A at home and Site B is my office space in town.
Site A has a 1gb symmetrical link, with a public static IP , with a peplink Balacnce 310x-56 router and a couple of asus routers behind it running mainly AP's
Site B has a 2gb symmetrical link with a public static IP, with a asus GT-be98 pro router
Site A is a 192.168.0.x /24 network running DHCP 192.168.0.100-200
Site B is a 10.10.10.x /24 network running DHCP 10.10.10.100-200 (I have renumbered this net a couple of different ways, so far no luck)
Site A is running the openvpn server
Site B is trying to connect to said openvpn server with no luck.. ) (Error IP routing conflict) one reason I renumbered just in case.
When at site A .. I would want to route all traffic out to the internet, except for the 10 traffic, that should use the split tunnel
What at site B I would want to routh all traffic out to the internet, except for the 192 traffic
Since I can't get the speed fusion to connect I can't do anything.. lol
I can with the openvpn client connect from my laptop to the peplink openvp server with either the split tunneling, or route all traffic just fine.
The sys log from the asus side hasn't been much help.... I am sure I am just missing something simple? but thought I would reach out to see if some fresh perspective helps..
thanks for looking at it
Apr 10 15:05:48 vpnclient5[26554]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
Apr 10 15:05:48 vpnclient5[26554]: [OpenVPN Server/emailAddress=support@peplink.com] Peer Connection Initiated with [AF_INET]xxxxxxx:1194
Apr 10 15:05:49 vpnclient5[26554]: SENT CONTROL [OpenVPN Server/emailAddress=support@peplink.com]: 'PUSH_REQUEST' (status=1)
Apr 10 15:05:50 vpnclient5[26554]: PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 192.168.0.254,route 192.168.0.0 255.255.255.0,dhcp-option DNS 192.168.0.254,ping 10,ping-restart 120,ifconfig 192.168.0.184 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: timers and/or timeouts modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: --ifconfig/up options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: route options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: route-related options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: peer-id set
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: adjusting link_mtu to 1624
Apr 10 15:05:50 vpnclient5[26554]: OPTIONS IMPORT: data channel crypto options modified
Apr 10 15:05:50 vpnclient5[26554]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Apr 10 15:05:50 vpnclient5[26554]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Apr 10 15:05:50 vpnclient5[26554]: TUN/TAP device tun15 opened
Apr 10 15:05:50 vpnclient5[26554]: TUN/TAP TX queue length set to 100
Apr 10 15:05:50 vpnclient5[26554]: /sbin/ifconfig tun15 192.168.0.184 netmask 255.255.255.0 mtu 1500 broadcast 192.168.0.255
Apr 10 15:05:50 vpnclient5[26554]: /etc/openvpn/ovpnc-up 5 tun15 1500 1552 192.168.0.184 255.255.255.0 init
Apr 10 15:05:52 vpnclient5: WARNING: Ignore conflicted routing rule: 192.168.0.0 255.255.255.0 gw 192.168.0.254
Apr 10 15:05:52 vpnclient5[26554]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Apr 10 15:05:52 vpnclient5[26554]: Initialization Sequence Completed