OpenVPN and access to a remote IPCOP over IPCOP-to-IPCOP VPN

  1. Zerina Part
    • You must have the latest Zerina Alpha (ZERINA-0.9.7a14-Installer.tar.gz as of this writing)
    • In the Zerina Advanced Server Options screen and under the Additional Push Route section, in the first box type in the IP / Subnet of your Remote IPCop Green network. There are 6 boxes I only filled in the 1st box.
      e.g. 192.168.0.0/255.255.255.0
    • Saved Advanced Options
    • Start your OpenVPN Server
  2. IPCop VPN Part
    (I used IPCops VPN to connect my 2 Networks. If you used Zerina/OpenVPN then make the same changes there)
    • You must create a 2nd VPN tunnel between your 2 networks. So, of course, you must make changes on both ends.
      Basically you are going to make a duplicate Net To Net VPN tunnel that will connect your 2 sites. However, you are going to substitute your Local Green Subnet information with the OpenVPN subnet. What this does is creates a new entry in the routing table telling it how to handle packets from the Roadwarrior subnet.
                  E.g.
                      * Local Green Subnet 10.1.99.0/255.255.255.0
                      * OpenVPN subnet 10.209.196.0/255.255.255.0
                      * Remote Green Subnet 192.168.0.0/255.255.255.0


      My Setup

                      * VPN Connection #1
                            o Local Side with OpenVPN Server
                              Right
                                  + Local Subnet: 10.1.99.0/255.255.255.0 – Green Subnet
                                  + Remote Host: 222.x.x.x
                                  + Remote Subnet: 192.168.0.0/255.255.255.0
                            o Remote Side
                              Left
                                  + Local Subnet: 192.168.0.0/255.255.255.0
                                  + Remote Host: 221.x.x.x
                                  + Remote Subnet: 10.1.99.0/255.255.255.0 – Green Subnet from Right
                      * VPN Connection #2 with OpenVPN Subnet Information
                            o Local Side with OpenVPN Server
                              Right
                                  + Local Subnet: 10.209.196.0/255.255.255.0 – OpenVPN Subnet
                                  + Remote Host: 222.x.x.x – Stays the same
                                  + Remote Subnet: 192.168.0.0/255.255.255.0 – Stays the same
                            o Remote Side
                              Left
                                  + Local Subnet: 192.168.0.0/255.255.255.0 – Stays the same
                                  + Remote Host: 221.x.x.x – Stays the same
                                  + Remote Subnet: 10.209.196.0/255.255.255.0 – OpenVPN Subnet from Right

Make sure both LANS are connected on both Net To Net VPN Tunnels. Reconnect your OpenVPN Client. Ping the remote network from your OpenVPN Client computer.

howto/vpns/openvpnn2n.txt · Last modified: 2008/09/24 00:12 by ds531