Re: easy-rsa

The original server from which I took all of these initial settings was 
and still is working perfectly.
I am building this new server as the original one is at it's EOL though 
I am not testing the new one in the production servers environment until 
I am fairly certain that it might work.

This is actually a migration of openvpn 2.4 to 2.5 as well as the 
supporting dependencies such as open ssl, System D, Easy-rsa. ...

I'll check out SNAT possibilities.

Thanks so much for all of the invaluable help thus far.


Richard




On 12/30/23 14:40, Antonio Quartulli wrote:
> Hi,
> 
> On 30/12/2023 21:35, Richard Couture wrote:
>> Things look good but I can NOT reach the desired net 192.168.51.0/24 
>> via the VPN
> 
> First of all, I'd like to say that here we are moving from problem to 
> problem and they are all being *addressed* one by one :-)
> 
> You started with easy-rsa and now we are talking about routing networks 
> behinda server :-)
> 
> This said, do hosts in 192.168.51.0/24 have a route towards 10.34.0.0/24?
> 
> If not, how do you expect them to send traffic back to your VPN client?
> 
> You have two options here:
> 1) find a way for those hosts to have a route towards the VPN;
> 2) enable NAT on the server. this way it will be the server's IP to 
> reach 192.168.51.0/24 and the connection will/should work.
> 
> Did this work before?
> 
> Cheers,
> 
> 
> 
> 

-- 
LinuxCabal Asociación Civil
Ing. Richard Couture
Novell CNE, ECNE, MCNE
HP/Compaq ASE
Cel.: (+52) 333 377-7505
Web: http://www.LinuxCabal.org
E-Mail: [email protected]
Hosted en la nube Cloud Sigma - www.CloudSigma.com

AVISO DE CONFIDENCIALIDAD: Este correo electrónico, incluyendo en su 
caso, los archivos adjuntos al mismo, pueden contener información de 
carácter confidencial y/o privilegiada, y se envían a la atención única 
y exclusivamente de la persona y/o entidad a quien va dirigido. La 
copia, revisión, uso, revelación y/o distribución de dicha información 
confidencial sin la autorización por escrito de LinuxCabal está 
prohibida. Si usted no es el destinatario a quien se dirige el presente 
correo, favor de contactar al remitente respondiendo al presente correo 
y eliminar el correo original incluyendo sus archivos, así como 
cualesquiera copia del mismo. Mediante la recepción del presente correo 
usted reconoce y acepta que en caso de incumplimiento de su parte y/o de 
sus representantes a los términos antes mencionados, LinuxCabal tendrá 
derecho a los daños y perjuicios que esto le cause.



_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users