[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] SNAT question


  • Subject: [Openvpn-users] SNAT question
  • From: Asier Baranguán <abaranguan@xxxxxxxxxxxxxxx>
  • Date: Fri, 02 Mar 2007 20:05:41 +0100

Hi all!

Thi sis not very related to OpenVPN, but perhaps someone can help me.

We have one LAN (192.168.48.0/24) in our office and OpenVPN working perfectly with a 10.20.10.0/subnet. The OpenVPN server isn't the gateway and have one ethernet card. When I connect to the VPN I get an IP of 10.20.10.xxx but the gateway can't add another route so client machines send the responses to the gateway and packets get lost.

I can add routes to the clients but I think it would be better if all packets coming from the tun0 device were SNAT'ed to look like they come from the OpenVPN Server LAN address anmd not the VPN address.

I've put this commands but it doesn't work:

iptables -t nat -A POSTROUTING -i tun0 -j SNAT --to 192.168.48.2

iptables -t nat -A POSTROUTING --source 10.20.10.0/24 -j SNAT --to 192.168.48.2

What's the appropiate IP rule?
begin:vcard
fn;quoted-printable:Asier Barangu=C3=A1n
n;quoted-printable:Barangu=C3=A1n;Asier
org;quoted-printable:ELPA Gesti=C3=B3n
adr;quoted-printable;dom:;;c/ Henao 4 - 3=C2=BAA;Bilbao;Bizkaia;48009
email;internet:abaranguan@xxxxxxxxxxxxxxx
title:A/P
tel;work:944.23.01.66
tel;fax:944.23.01.78
x-mozilla-html:FALSE
url:http://www.elpagestion.com
version:2.1
end:vcard

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users