Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I set up an Ubuntu Server 12.04 LTS in my LAN and forwarded tcp port 1194 to it. OpenVPN-Server is running, the Client (Ubuntu 12.04 LTS) can connect. Device tap0 is visible on client:

      tap0      Link encap:Ethernet  HWaddr 2e:bd:e8:ae:f7:3d  
      inet addr:192.168.13.200  Bcast:192.168.13.255  Mask:255.255.255.0
      inet6 addr: fe80::2cbd:e8ff:feae:f73d/64 Scope:Link
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      RX packets:0 errors:0 dropped:0 overruns:0 frame:0
      TX packets:49 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:100 
      RX bytes:0 (0.0 B)  TX bytes:8445 (8.4 KB)

LAN Subnet is 192.168.13.x so obviously I got a proper IP-address. Nevertheless I can't ping/ssh/whatever any other machine in the 192.168.13.x-LAN:

me@myhost$ traceroute 192.168.13.1
traceroute to 192.168.13.1 (192.168.13.1), 30 hops max, 60 byte packets
1  myhost.local (192.168.13.200)  2997.258 ms !H  2997.207 ms !H  2997.195 ms !H
me@myhost$ ssh 192.168.13.1
ssh: connect to host 192.168.13.1 port 22: No route to host
me@myhost:~$ ping 192.168.13.149
PING 192.168.13.149 (192.168.13.149) 56(84) bytes of data.
From 192.168.13.200 icmp_seq=1 Destination Host Unreachable

I added to the /etc/ufw/before.conf:

      # NAT table rules
      *nat
      :POSTROUTING ACCEPT [0:0]
      # Allow traffic from OpenVPN client to eth0
      -A POSTROUTING -s 192.168.13.0/8 -o eth0 -j MASQUERADE
      COMMIT

as well as /etc/openvpn/server.conf :

  port 1194
  proto tcp
  dev tap0
  server-bridge 192.168.13.1 255.255.255.0 192.168.13.200 192.168.13.220
  push "route 192.168.13.0 255.255.255.0"
  push "dhcp-option DNS 192.168.13.1"

and /etc/network/interfaces:

  auto br0
  iface br0 inet dhcp
  bridge_ports eth0

Router (DHCP-Gateway) is 192.168.13.1 VPN-Server is: 192.168.13.149

Did I miss something? Did I spoil any config? :-/ Thanks for your help!

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.