Hello,
I am running VMWare Server 2 on Ubuntu 8.04 64-bit. I have the OpenVPN server running, which has been running for over 2 years, even with an Linux distrobution change, and it has been rock solid.
The server runs the OpenVPN server, VMWare server, and several other things, all without any problems. My configurations for the server and clients are below. All the physical clients can connect without any problems, and they are able to communicate through the VPN.
Recently, I needed to add a couple of virtual clients (one Gentoo and more Ubuntu 8.04 32 & 64-bit). The virtual clients can connect to the VPN server and talk seemlessly, but the virtual clients are not able to talk to the physical clients through the VPN.
I have another VMWare Server (2) running on another computer and I was able to get a virtual computer (test) running on that server to communicate with all of the physical computers, but again, not the other virtual ones. This test system is also running Ubuntu 8.04 (32-bit) and using the same configuration files.
Every computer (physical or virtual) has their own certificates; no sharing allowed.
This is what I need to resolve and I am looking for suggestions. Please let me know what other information you may need. In the information below, I have changed some of the informationn for security reasons such as system names, certificate names, public IP addresses, etc.
Thanks,
Harlan...
Server configuration:
port 1194
proto tcp
dev tap
ca /etc/openvpn/vpn/ca.crt
cert /etc/openvpn/vpn/server.crt
key /etc/openvpn/vpn/server.key # This file should be kept secret
dh /etc/openvpn/vpn/dh2048.pem
server 10.8.1.0 255.255.255.0
ifconfig-pool-persist /var/log/openvpn/ipp.txt
push "route 10.8.1.0 255.255.255.252"
client-config-dir /etc/openvpn/vpn/clients
route 10.8.1.0 255.255.255.0
client-to-client
keepalive 10 120
tls-auth /etc/openvpn/vpn/private.key 0 # This file is secret
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log-append /var/log/openvpn/openvpn.log
verb 4
Virtual client configuration:
client
dev tap
proto tcp
remote server1.vpn 1194
remote server3.vpn 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
mute-replay-warnings
ca /etc/openvpn/vpn/ca.crt
cert /etc/openvpn/vpn/vclient.crt
key /etc/openvpn/vpn/vclient.key
ns-cert-type server
tls-auth /etc/openvpn/vpn/private.key 1
cipher DES-EDE3-CBC
comp-lzo
log-append /var/log/openvpn/openvpn.log
verb 4
tun-mtu 1500
tun-mtu-extra 32
mssfix 1400
key-method 2
pull
Physical client configuration:
client
dev tap
proto tcp
remote server1.vpn 1194
remote server3.vpn 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
mute-replay-warnings
ca /etc/openvpn/vpn/ca.crt
cert /etc/openvpn/vpn/pclient.crt
key /etc/openvpn/vpn/pclient.key
ns-cert-type server
tls-auth /etc/openvpn/vpn/private.key 1
cipher DES-EDE3-CBC
comp-lzo
log-append /var/log/openvpn/openvpn.log
verb 4
tun-mtu 1500
tun-mtu-extra 32
mssfix 1400
key-method 2
pull