Hello, I've installed a Debian SoftetherVPN Server. However there's no access/ping to any other private/public subnets. I've Setup A NAT instance to route to internet and subnet and it works for all.
Not for the VPN though - it may be routing/ip/nat issue but cannot resolve it for weeks now.
Using OpenVPN with routing to subnets works perfect but I LOVE Softether and beg for help to make it work for our Amazon Cloud. We got couple of offices and VPN is mandatory
Could anyone please give me a hint how to fix that!
More details:
Amazon VPC 10.0.0.0/16 with public and private subnets.
Production instances in private subnet 10.0.10.0/24
Development instances in private subnet 10.0.20.0/24
NAT instance in Public subnet 10.0.90.0/24
VPN instance in Public subnet 10.0.80.0/24
DC/DNS/DHCP server 10.0.1.5 - Active directory subnet; scope 10.0.1.20-10.0.1.220
Nat is routing the trafic from private subnets to the Internet
All subnets are accessible and pingable within.
Everything works as it should.
Then I need to provide cloud access for our Internal Domain users. VPN debian server installed and connecting to it is successfull. IP obtained from virtualDHCP. Then access to Internet is lost and no access to any of the subnet granted
VPN server installed as advised in http://blog.lincoln.hk/blog/2013/05/17/ ... al-bridge/
I just need global remote access to our Cloud and subnet (internal IP) servers.
I'm I missing any configuration or have it misconfigured? Any advise will be highly apreciated
=====debian Server main Settings=====
VPN Server IP: 10.0.80.254
VPN Client IP Range: 10.0.80.20-10.0.80.200
Tap Device name: tap_soft
# apt-get install dnsmasq
net.ipv4.ip_forward = 1
# sysctl --system
# iptables -t nat -A POSTROUTING -s 10.0.80.0/24 -j SNAT --to-source 10.0.80.254
# apt-get install iptables-persistent
==================
Could anyone shed some light into a proper VPN routing within Amazon?
And installing Window Softether Server in the cloud led to the same limitation
History: Using Windows SoftetherVPN on local VMWare for years with global access to our internal systems - Fully satisfied!
Thank You
Amazon VPC cloud with VPN access to all subnets issue
-
- Posts: 2
- Joined: Fri Apr 10, 2015 12:48 pm
-
- Posts: 2458
- Joined: Mon Feb 24, 2014 11:03 am
Re: Amazon VPC cloud with VPN access to all subnets issue
>># iptables -t nat -A POSTROUTING -s 10.0.80.0/24 -j SNAT --to-source 10.0.80.254
Is it right configuration?
It's same subnet.
Why did you set such configuration?
Is it right configuration?
It's same subnet.
Why did you set such configuration?
-
- Posts: 2
- Joined: Fri Apr 10, 2015 12:48 pm
Re: Amazon VPC cloud with VPN access to all subnets issue
Well, it is obviously wrong.
What would be the actual iptables command to provide access to all subnets via the VPN ?
Could you build the right iptables command, please.
The nat instance is working properly for the private subnets.
Yet the VPN is not routing away of the 10.0.1.0/24 subnet
These are the scope of IP assigned to clients when connecting to VPN
The forwarding mus be handled by NAT but that does not happen. That's why I'm blaming the VPN iptable configuration
I've attached an image with actual subnet configuration.
What would be the actual iptables command to provide access to all subnets via the VPN ?
Could you build the right iptables command, please.
The nat instance is working properly for the private subnets.
Yet the VPN is not routing away of the 10.0.1.0/24 subnet
These are the scope of IP assigned to clients when connecting to VPN
The forwarding mus be handled by NAT but that does not happen. That's why I'm blaming the VPN iptable configuration
I've attached an image with actual subnet configuration.
You do not have the required permissions to view the files attached to this post.
-
- Posts: 2458
- Joined: Mon Feb 24, 2014 11:03 am
Re: Amazon VPC cloud with VPN access to all subnets issue
SoftEther VPN is a L2 VPN. So, a virtual hub doesn't do routing.
Which do you mean NAT in your attached figure SecureNAT or OS NAT?
Which do you mean NAT in your attached figure SecureNAT or OS NAT?