Topic: sme 7.4 running on virtualbox under windows xp - Openvpn issue in routed mode

[kienast]

Hello everyone.
You are my last hope . I have tried everything I can but I am not able to get this working , let me explain .

I have configured on my xp machine an instance of SME 7.4 via virtualbox . This is working fine ( I pass the details here) but I can basically connect from anywhere to the server using PPTP . Once the Vpn connexion is up I can map the Ibays drive on my computer . Good 

As PPtP is not as secure as Ipsec I have configured Open vpn server on my xp machine .At this stage I can successfully open the Vpn connection from my work laptop where the Open vpn client is running to the Vpn server .
Before going any further here is the topology.

office         ---------Internet --------------------------adslbox-----------------XP pc--------------SME ON VIRTUAL box
192.168.2.x                                          x.dyndns.org               192.168.1.1       192.168.1.4          192.168.1.124


When I open the Ipsec tunnel I get 10.8.1.1 as Ip on the Openvpn server and 10.8.1.6 on the client , fine .
From the client (from my laptop in the office) I can ping 192.168.1.4 (My pc at home) but not 192.168.1.124 which is the Sme server.

I have tried to change the virtualbox network settings (I am using bridged mode at the moment) but no luck .
I have also tried a lot of different configuration on both the Open vpn server , no luck .

I am sure this is either a bug or a routing problem somewhere but I can not figure out what it is .

As anyone ever had the same issue before ? Please let me know what informations you need and I will post everything here ..
Thanks !
K.

[CharlieBrady]

As PPtP is not as secure as Ipsec I have configured Open vpn server on my xp machine .

openvpn is not ipsec.

I'm not sure whether you are asking about openvpn, Windows XP, or virtualbox, but all are off-topic for this forum:

Discussion of the use of *ONLY* the components and features included on the SME Server 7.x CD.

[JoshuaR]

Discussion of the use of *ONLY* the components and features included on the SME Server 7.x CD.

I'll just post here until a mod moves it to a more appropriate section.

@ kienast
That sounds like a routing issue.

From the client (from my laptop in the office) I can ping 192.168.1.4 (My pc at home) but not 192.168.1.124 which is the Sme server.

  That surprises me, since the office laptop is receiving an IP from the 10. range, it is not on your 192.168.1.x range; I would have thought you would be unable to ping your xp machine.  That being said, I am not to familiar with OpenVpn, and it may perform some kind of routing between vpn host (your xp) machine and the vpn-connected client.

Can you ping any other 192.168.1.x addresses from your office laptop apart from the xp machine?
If no, my main advice would be:  have a look at getting the client connected via vpn an IP on the 192.168.1.x range, not on the 10.8.1.x range.


Cheers,
Josh

[kienast]

Thanks for the replies -
I have some improvement today . After enbling the ip forwarding feature on my xp machine I can now ping 192.168.1.124 from my laptop in the office .

But I am still unable to ping 192.168.2.69 from my xp machine 192.168.1.4 (where the openvpn server is running) . I suspect a routing problem somewhere but can't figure out where the problem is , arghh ...

Thanks !
K

[JoshuaR]

But I am still unable to ping 192.168.2.69 from my xp machine 192.168.1.4

you will have to have your router set up to route the .2 subnet through your VPN tunnel.
(Your XP machine will try pass traffic through your router, which if it doesn't know to route the .2 subnet through the vpn, won't know what to do with the traffic...)

[kienast]

Hello Josh.
I have tried to manually add a static route 192.168.2.0/24 10.8.0.1 ----> no luck
On my routeur at home I can not configure this route as 10.8.0.0 is ot a local network for him .(it is a crap adsl box) .

I think I am stuff.........
Any idea are welcome guys !
thanks
k

[kienast]

Believe it or not it is working now !!!!!
What I have done is share the local network connection on my server to allow the vpn connection to access the internet through it and it is working !

So here the final topology :

SME server 7.4 running on virtualbox on Xp machine host accessible via OpenVpn with Ipsec additional features . waouh , took me 10 days to get it working but it works ! Yes

Thanks all
K

[CharlieBrady]

SME server 7.4 running on virtualbox on Xp machine host accessible via OpenVpn with Ipsec additional features

openVPN and IPSEC are different beasts. What are these "Ipsec additional features" you claim?

[kienast]

SSL sorry master........