This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site2Site troubles, all connects fine, but no data is coming though

Hello

I'm on the last leg trying to connect my CentOS based firewall to my ASG v8 via OpenVPN

The connection itself goes just fine, the openvpn reports connect successfull and the Astato/Sophos gives the green light for the connection,
but if i try pinging/connecting to something on the LAN net of the asg, nothing gets through.

In my existing setup between two openvpn's the network is consisting of 2 peer ip's in the same range

But with the ASG it is introducing an peer ip in the 10.242 range

From my openvpn routes:

10.242.2.1      0.0.0.0         255.255.255.255 UH    0      0        0 tun0

192.168.0.0     10.242.2.1      255.255.255.0   UG    0      0        0 tun0

84.*.*.*        10.242.2.1      255.255.255.0   UG    0      0        0 tun0

and ip configuration:

8: tun0:  mtu 1500 qdisc pfifo_fast qlen 100

    link/[65534] 

    inet 10.4.0.1 peer 10.242.2.1/32 scope global tun0

Screenshots from the utm is also included

Anyone have a suggestion what to do?

This thread was automatically locked due to age.

Parents

0 BAlfson over 12 years ago

Hi, mv,

I'm not sure what you mean by, "In my existing setup between two openvpn's the network is consisting of 2 peer ip's in the same range."

I'm not sure why you selected the static IP - is the 10.242.1.0/24 subnet in use already on the CentOS side? The Astaro SSL VPN usually just picks an IP out of that range.

Just to confirm - the endpoint of the Tunnel on the Astaro side is in one of the local networks (DMZ)?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 12 years ago

Hi, mv,

I'm not sure what you mean by, "In my existing setup between two openvpn's the network is consisting of 2 peer ip's in the same range."

I'm not sure why you selected the static IP - is the 10.242.1.0/24 subnet in use already on the CentOS side? The Astaro SSL VPN usually just picks an IP out of that range.

Just to confirm - the endpoint of the Tunnel on the Astaro side is in one of the local networks (DMZ)?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 mvrasmussen over 12 years ago in reply to BAlfson
Hey

I'm not sure why you selected the static IP - is the 10.242.1.0/24 subnet in use already on the CentOS side? The Astaro SSL VPN usually just picks an IP out of that range.

It was just to try something, it does not make a difference

With the old CentOS->CentOS OpenVPN setup it's just defined as
ifconfig 10.4.0.1 10.4.0.2
in the openvpn config

Now, the network is configured by the PUSH message coming from the ASG

The network here (Office/Kontor - 192.168.12.0/24) should have access to both networks on the ASG site, DMZ (84.*/24) and the LAN (192.168.0.0/24)

Thanks for your time
Mads
Cancel
Vote Up 0 Vote Down

Cancel

Site2Site troubles, all connects fine, but no data is coming though

Submitted a Tech Support Case lately from the Support Portal?