Home Page › Forums › Network Management › VPN › Lan to Lan config
- This topic is empty.
-
AuthorPosts
-
April 22, 2010 at 9:37 pm #42371
Semmelbroesel
MemberHi profs,
i want do to an Lan to Lan connection with bonding.
But i have trouble at first do to the lan to lan connection.
I read so many faq und documentations but non of them are really exatly an many question are still there.On server at the ISP side i install Zeroshell then i config an new Lan to Lan VPN-> my question what do i have to write into the Remote host? Some write you must leave it empty some write the Server IP Adress.
I testet all but i get allways
23:25:16 /root/kerbynet.cgi/scripts/vpn_mii VPN00 1500 1578 init
23:25:16 SIGTERM[hard,init_instance] received, process exiting
23:25:17 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Sep 23 2008
23:25:17 TUN/TAP device VPN00 opened
23:25:17 Listening for incoming TCP connection on [undef]:1195
23:25:18 Interface VPN00 is DOWNIn the Firewall i set follow rule
INPUT Rules
Seq Input Output Description Log Active
1 * * ACCEPT tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1195 dpt:1195 no
2 * * ACCEPT tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1196 dpt:1196 no
3 * * ACCEPT tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1197 dpt:1197OUTPUT Rules
Seq Input Output Description Log Active
1 * * ACCEPT tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1195 dpt:1195 no
2 * * ACCEPT tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1196 dpt:1196 no
3 * * ACCEPT tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1197 dpt:1197What do iwrong on my config?
I hope anyone can help me.Regards Mario
April 22, 2010 at 9:46 pm #50185Semmelbroesel
Membernow i changed from TCP to UDP und i got an internal connection.
But why? Is there a special for TCP?Some many questions
April 22, 2010 at 10:27 pm #50186ppalias
MemberApart from being connectionless UDP shouldn’t have any more differences against TCP. It is generally advised to use UDP in VPN tunnels however, so this error lead you to the right path. From the logs I cannot find anything wrong. Maybe if you could try it with more verbose logging. I’ll give it a shot in my lab as well, as it sparked my curiosity.
April 22, 2010 at 10:35 pm #50187Semmelbroesel
MemberThank you for your answer.
I got connection with UDP this ok
Next error 🙁
On Server side all 3 VPN connection are are connectet over 1 DSL Line.
On client side i give each vpn connection his own Gateway from the Loadbalancer and his own port 1195,1196 an 1197.Any ideas?
April 22, 2010 at 11:06 pm #50188Semmelbroesel
Memberis there are a problem when all gateways are in the same subnet
Gateway 1 192.168.1.1
Gateway 2 192.168.1.2
Gateway 3 192.168.1.3???????
April 23, 2010 at 4:25 am #50189atheling
Member@Semmelbroesel wrote:
is there are a problem when all gateways are in the same subnet
Gateway 1 192.168.1.1
Gateway 2 192.168.1.2
Gateway 3 192.168.1.3???????
Yes. That is a problem that houkouonchi is having too. See: http://www.zeroshell.net/eng/forum/viewtopic.php?t=2176
To have that work you would need to be able to specify both the IP address of the gateway and the device to access it over which you can’t do with ZS at the moment.
Could you move the IP subnet assignments around to make them different ranges?
April 23, 2010 at 8:08 am #50190Semmelbroesel
MemberThank you for your reply.
I read the threat, i know what they mean.But Change in what? i have 3 DSL lines 1 is from the German Telekom and the another 2 from M-Net (they have the same ISP Gateway)
My config is this:
Datacenter: Fixed IP, 3x VPN lines 1195,1196,1197 Gateway from my Datacenter provider
At home: 3x DSL lines as above T-Com, M-Net, 3x Avm Fritzbox 192.168.1.1,192.168.1.2,192.168.1.3
In the VPN config: remotehost Ip adress from Zeroshell at my datacenter ports 1195-1197 UDP Gateway 192.168.1.1 Port 1195 for VPN1, 192.168.1.2 port 1196 for VPN2 ….VPN lines are connected, but on Datacenter als 3 VPN Lines connected to the same Ip adress.
What is wrong?regards Mario[/img]
April 23, 2010 at 10:13 am #50191Semmelbroesel
MemberI doesn’t unterstand, if i use only netbalancer without bonding the network. Client computer behind ZS will use all three gateways to get data.
April 23, 2010 at 10:40 am #50192ppalias
MemberChange the internal IP address of the Fritzbox to 192.168.1.1/24, 192.168.2.1/24 and 192.168.3.1/24
April 23, 2010 at 11:05 am #50193Semmelbroesel
Memberit doesn’t work 🙁 It looks like does the client use only gateway 1
April 23, 2010 at 1:12 pm #50194ppalias
MemberShow us here a screenshot of the SETUP->NETWORK please.
April 23, 2010 at 2:16 pm #50195Semmelbroesel
MemberApril 23, 2010 at 3:08 pm #50196ppalias
MemberFirst of all it is a good idea to distinguish the subnets of the Fritzboxes, as I mentioned before.
Secondly you haven’t created a BOND of the VPN tunnels. If you create the BOND then you will have only one default gateway on the client ZS (the BOND IP of the server ZS).April 23, 2010 at 10:22 pm #50197Semmelbroesel
MemberThis cannot be the Problem because Netbalancer is working.
I testet many configs and allways he connect with the first Gateway in the Netbalancer.
This Line is interessting: Default Route has been changed: nexthop via 192.168.2.1 weight 1 realm 102 nexthop via 192.168.1.1 weight 1 realm 104
It looks like that he ignores my vpn Setup gateway an use only his one nexthop.
Where can i find a log to see what is he doing in the connection time. The logs that i found doesn’t show deep informations.Has no one a vpn bonding over 2 or more dsl lines? And will share his knowlege about that.
Regards Mario
April 24, 2010 at 12:14 pm #50198ppalias
MemberYou are obviously doing something wrong here. The ip route log says that you are using 2 gateways with equal weight, 192.168.2.1 and 192.168.1.1 .
Check out the tutorial for the thing you want to do
http://www.linuxplanet.com/linuxplanet/tutorials/6799/1/
In general documentation and tutorial on ZS is gathered here. -
AuthorPosts
- You must be logged in to reply to this topic.