Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I set up an Ubuntu Server 12.04 LTS in my LAN and forwarded tcp port 1194 to it. OpenVPN-Server is running, the Client (Ubuntu 12.04 LTS) can connect. Device tap0 is visible on client:

      tap0      Link encap:Ethernet  HWaddr 2e:bd:e8:ae:f7:3d  
      inet addr:192.168.13.200  Bcast:192.168.13.255  Mask:255.255.255.0
      inet6 addr: fe80::2cbd:e8ff:feae:f73d/64 Scope:Link
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      RX packets:0 errors:0 dropped:0 overruns:0 frame:0
      TX packets:49 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:100 
      RX bytes:0 (0.0 B)  TX bytes:8445 (8.4 KB)

LAN Subnet is 192.168.13.x so obviously I got a proper IP-address. Nevertheless I can't ping/ssh/whatever any other machine in the 192.168.13.x-LAN:

me@myhost$ traceroute 192.168.13.1
traceroute to 192.168.13.1 (192.168.13.1), 30 hops max, 60 byte packets
1  myhost.local (192.168.13.200)  2997.258 ms !H  2997.207 ms !H  2997.195 ms !H
me@myhost$ ssh 192.168.13.1
ssh: connect to host 192.168.13.1 port 22: No route to host
me@myhost:~$ ping 192.168.13.149
PING 192.168.13.149 (192.168.13.149) 56(84) bytes of data.
From 192.168.13.200 icmp_seq=1 Destination Host Unreachable

I added to the /etc/ufw/before.conf:

      # NAT table rules
      *nat
      :POSTROUTING ACCEPT [0:0]
      # Allow traffic from OpenVPN client to eth0
      -A POSTROUTING -s 192.168.13.0/8 -o eth0 -j MASQUERADE
      COMMIT

as well as /etc/openvpn/server.conf :

  port 1194
  proto tcp
  dev tap0
  server-bridge 192.168.13.1 255.255.255.0 192.168.13.200 192.168.13.220
  push "route 192.168.13.0 255.255.255.0"
  push "dhcp-option DNS 192.168.13.1"

and /etc/network/interfaces:

  auto br0
  iface br0 inet dhcp
  bridge_ports eth0

Router (DHCP-Gateway) is 192.168.13.1 VPN-Server is: 192.168.13.149

Did I miss something? Did I spoil any config? :-/ Thanks for your help!

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.