Bananian

Routed OpenVPN & ipv4 routing on bananian 14.09

4 3028
Edited by kyriatide at Tue Oct 28, 2014 13:34

Hi,

I've set up a routed OpenVPN on bananian 14.09, where the tunnel's subnet is 10.0.1.0/24, while the LAN is on 10.0.0.0/24.

IP forwarding on bananian is enabled in sysctl.conf, and I did set up a static route on my router to direct traffic for 10.0.1.0/24 to the bananapi (aside of port forwarding rules).

In this setup, I can connect to the bananapi from an OpenVPN client, however, I can't access any other device on my LAN via the VPN tunnel. iptables are all empty.

So it looks like a routing issue, but I don't know how to debug the issue - is it my router config., is it the bananian config? Is there a simple way to do so? Or is there any additional configuration on the bananapi necessary?

thanks for any pointers!

[edited]
10.0.0.1/24 and 10.0.0.0/24 are exactly the same subnets!

You have to use something like 10.10.0.0/24 for the tunnel.

Bananian replied at Tue Oct 28, 2014 06:05
10.0.0.1/24 and 10.0.0.0/24 are exactly the same subnets!

You have to use something like 10.10.0.0/ ...

ah, sorry, typo! Of course I meant 10.0.1.0/24 and 10.0.0.0/24 (I'll correct the post above)

Edited by kyriatide at Wed Oct 29, 2014 08:57

update - looks like an issue with static routing on my router.

How did I find out? - I added a static route on another machine on my local network
  1. route add net 10.0.1.0/24 gw <bananapi-ip>
Copy the Code
and voila, I can access that other machine via the VPN tunnel.

sorry for bothering you in this forum, I thought it might have something to do with bananian.

tkaiser  
I thought it might have something to do with bananian


Unlikely since Bananian is just Debian wheezy on tiny hardware ;)

There are issues that are related to the Banana Pi itself (eg. unreliable network behaviour due to gmac hardware/drivers or everything related to ACPI stuff on 'PC hardware' eg. IRQ balancing or boot procedure) but if you left the hardware layer everything else is just plain Debian.

You have to log in before you can reply Login | Sign Up

Points Rules