How to Access a host behind a server over VPN (IP Forwarding)Cisco VPN Client on Server 2003 R2Can't access database server over VPNUnable to access local network when Cisco VPN client is connectedAccess VirtualBox client (WinXP) from host (Linux) when client is connected to VPNCisco AnyConnect SSL VPN client allows local LAN access, but not on additional multi-homed serverSSH port forwarding, forward port over VPNCisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnetCisco ASA 5510 : VPN split tunnel Strange behaviourHow to use a VPN Client inside Azure VM and Keep Remote Desktop Connection available?Access a host-server using OpenVPN
Does setting a new type clear the rules text for non-lands?
Can a user sell my software (MIT license) without modification?
Passing an Parameter to Apex from LWC
Does a 3rd-level Wolf Totem barbarian get advantage against enemies when an ally is within 5 feet of the enemy?
What was with the Miles Morales's stickers?
How do governments keep track of their issued currency?
Are there downsides to using std::string as a buffer?
How to tell your grandparent to not come to fetch you with their car?
Why doesn’t a normal window produce an apparent rainbow?
Scrum Master role: Reporting?
PTFE detoriation temperature
My coworkers think I had a long honeymoon. Actually I was diagnosed with cancer. How do I talk about it?
How did students remember what to practise between lessons without any sheet music?
Comparing and find out which feature has highest shape area in QGIS?
What language is the software written in on the ISS?
Argon vs nitrogen for preserving wine
Was the Tamarian language in "Darmok" inspired by Jack Vance's "The Asutra"?
Can anyone identify this tank?
Smooth switching between 12 V batteries, with a toggle switch
Should an arbiter claim draw at a K+R vs K+R endgame?
The eyes have it
Why was the calendar not arranged so that Yom Kippur never falls on Shabbat?
Where does "0 packages can be updated." come from?
Russian equivalents of "no love lost"
How to Access a host behind a server over VPN (IP Forwarding)
Cisco VPN Client on Server 2003 R2Can't access database server over VPNUnable to access local network when Cisco VPN client is connectedAccess VirtualBox client (WinXP) from host (Linux) when client is connected to VPNCisco AnyConnect SSL VPN client allows local LAN access, but not on additional multi-homed serverSSH port forwarding, forward port over VPNCisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnetCisco ASA 5510 : VPN split tunnel Strange behaviourHow to use a VPN Client inside Azure VM and Keep Remote Desktop Connection available?Access a host-server using OpenVPN
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have an Ubuntu server (172.10.200.11) and many remote terminal units with simcards and each individual simcard operator using different IP pool such as 10.57.0.0/16 for OP-A, 10.112.0.0/16 for OP-B, etc.
In the server actually i am using a routing table to be able to access the remote terminal units on diffent IP pools. Without this routing table i have no access to the IP pools.
For instance :
10.57.0.0/16 using gw 172.10.238.1
10.112.0.0/16 using gw 172.10.238.2
10.155.0.0/16 using gw 172.10.238.3
And...
Actually i am using "Cisco VPN Client" to access my server IP from outside of datacenter. For this purpose i am making a connection to VPN gateway using "Cisco VPN CLient" application then trying to ping my server's IP 172.10.200.11
I can do the following things successfully from my laptop after my VPN Connection established to VPN Gateway:
- Establish Remote Desktop connection the server's IP:172.10.238.3
- Establish SSH connection from my laptop to the server's IP:172.10.238.3
- ICMP ping to the server's IP:172.10.238.3
- Traceroute to the server's IP:172.10.238.3
For checking the connection (up or down) status of Remote Terminal Units i am connecting to the server via SSH or Remote Desktop then trying to ping to the IP address of Remote Terminal Unit.
Everything is OK until here but this way consumes too much bandwidth especially in case if connect via Remote Desktop connection.
- Connect to VPN Gateway using "Cisco VPN Client" from the laptop
- Establish a Remote Desktop connection to server's IP
- Open Browser in the server on Remote Desktop Connection.
- Enter Remote Terminal Unit (RTU)'s IP (10.155.1.22) on the browser and do what you want!
- Successfullu establish an ICMP ping to the RTU's IP address (10.155.1.22) in a terminal screen on Remote Desktop or in a SSH connection session.
But i want to do following:
- Connect to VPN Gateway using Cisco VPN Client from the laptop
- Open Browser in the laptop
- Enter Remote Terminal Unit's IP (10.155.1.22) on browser and do what you want!
- Successfully establish an ICMP ping to the RTU's IP address (10.155.1.22) in a shell/terminal screen on my laptop (NOT in Remote Desktop)
Restrictions:
- Actually i have no right to change the VPN gateway settings. But i can
only change the server settings to achieve this.
Is there any way to do this? I know it exist but my mind confused.
First i have installed Hamachi but this way give me access to server without need of VPN connection. But still i can not directly ping to RTU IP's from my laptop. It did not resolved my problem.
In technically i want to use my server act as a "router" to route/forward incoming requests from my laptop (ICMP & IP packets) to the RTU's IP.
I have researched about how to enable IP MASQUERADE or IP FORWARDING on Ubuntu 16.04. If i am right -technically- it needs 2 NICs or 2 Different IPs on the machine. But i have only one IP (Bonded) on my server.
I need to reach directly to the RTU IP addresses from my laptop and my server should be acting as a router/gateway or etc. to achieve this.
Is there anybody can explain me step-by-step how to do this on Ubuntu?
Click to see picture of my system diagram
vpn ping cisco-vpn ip-forwarding masquerade
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
add a comment |
I have an Ubuntu server (172.10.200.11) and many remote terminal units with simcards and each individual simcard operator using different IP pool such as 10.57.0.0/16 for OP-A, 10.112.0.0/16 for OP-B, etc.
In the server actually i am using a routing table to be able to access the remote terminal units on diffent IP pools. Without this routing table i have no access to the IP pools.
For instance :
10.57.0.0/16 using gw 172.10.238.1
10.112.0.0/16 using gw 172.10.238.2
10.155.0.0/16 using gw 172.10.238.3
And...
Actually i am using "Cisco VPN Client" to access my server IP from outside of datacenter. For this purpose i am making a connection to VPN gateway using "Cisco VPN CLient" application then trying to ping my server's IP 172.10.200.11
I can do the following things successfully from my laptop after my VPN Connection established to VPN Gateway:
- Establish Remote Desktop connection the server's IP:172.10.238.3
- Establish SSH connection from my laptop to the server's IP:172.10.238.3
- ICMP ping to the server's IP:172.10.238.3
- Traceroute to the server's IP:172.10.238.3
For checking the connection (up or down) status of Remote Terminal Units i am connecting to the server via SSH or Remote Desktop then trying to ping to the IP address of Remote Terminal Unit.
Everything is OK until here but this way consumes too much bandwidth especially in case if connect via Remote Desktop connection.
- Connect to VPN Gateway using "Cisco VPN Client" from the laptop
- Establish a Remote Desktop connection to server's IP
- Open Browser in the server on Remote Desktop Connection.
- Enter Remote Terminal Unit (RTU)'s IP (10.155.1.22) on the browser and do what you want!
- Successfullu establish an ICMP ping to the RTU's IP address (10.155.1.22) in a terminal screen on Remote Desktop or in a SSH connection session.
But i want to do following:
- Connect to VPN Gateway using Cisco VPN Client from the laptop
- Open Browser in the laptop
- Enter Remote Terminal Unit's IP (10.155.1.22) on browser and do what you want!
- Successfully establish an ICMP ping to the RTU's IP address (10.155.1.22) in a shell/terminal screen on my laptop (NOT in Remote Desktop)
Restrictions:
- Actually i have no right to change the VPN gateway settings. But i can
only change the server settings to achieve this.
Is there any way to do this? I know it exist but my mind confused.
First i have installed Hamachi but this way give me access to server without need of VPN connection. But still i can not directly ping to RTU IP's from my laptop. It did not resolved my problem.
In technically i want to use my server act as a "router" to route/forward incoming requests from my laptop (ICMP & IP packets) to the RTU's IP.
I have researched about how to enable IP MASQUERADE or IP FORWARDING on Ubuntu 16.04. If i am right -technically- it needs 2 NICs or 2 Different IPs on the machine. But i have only one IP (Bonded) on my server.
I need to reach directly to the RTU IP addresses from my laptop and my server should be acting as a router/gateway or etc. to achieve this.
Is there anybody can explain me step-by-step how to do this on Ubuntu?
Click to see picture of my system diagram
vpn ping cisco-vpn ip-forwarding masquerade
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
iptables and MASQUERADE are (I think) the right track - openVPN creates the 2nd NIC you are thinking of (in this case tun or tap interfaces), and you can masq your pool to your server's IP.
– iwaseatenbyagrue
Apr 4 '17 at 18:04
add a comment |
I have an Ubuntu server (172.10.200.11) and many remote terminal units with simcards and each individual simcard operator using different IP pool such as 10.57.0.0/16 for OP-A, 10.112.0.0/16 for OP-B, etc.
In the server actually i am using a routing table to be able to access the remote terminal units on diffent IP pools. Without this routing table i have no access to the IP pools.
For instance :
10.57.0.0/16 using gw 172.10.238.1
10.112.0.0/16 using gw 172.10.238.2
10.155.0.0/16 using gw 172.10.238.3
And...
Actually i am using "Cisco VPN Client" to access my server IP from outside of datacenter. For this purpose i am making a connection to VPN gateway using "Cisco VPN CLient" application then trying to ping my server's IP 172.10.200.11
I can do the following things successfully from my laptop after my VPN Connection established to VPN Gateway:
- Establish Remote Desktop connection the server's IP:172.10.238.3
- Establish SSH connection from my laptop to the server's IP:172.10.238.3
- ICMP ping to the server's IP:172.10.238.3
- Traceroute to the server's IP:172.10.238.3
For checking the connection (up or down) status of Remote Terminal Units i am connecting to the server via SSH or Remote Desktop then trying to ping to the IP address of Remote Terminal Unit.
Everything is OK until here but this way consumes too much bandwidth especially in case if connect via Remote Desktop connection.
- Connect to VPN Gateway using "Cisco VPN Client" from the laptop
- Establish a Remote Desktop connection to server's IP
- Open Browser in the server on Remote Desktop Connection.
- Enter Remote Terminal Unit (RTU)'s IP (10.155.1.22) on the browser and do what you want!
- Successfullu establish an ICMP ping to the RTU's IP address (10.155.1.22) in a terminal screen on Remote Desktop or in a SSH connection session.
But i want to do following:
- Connect to VPN Gateway using Cisco VPN Client from the laptop
- Open Browser in the laptop
- Enter Remote Terminal Unit's IP (10.155.1.22) on browser and do what you want!
- Successfully establish an ICMP ping to the RTU's IP address (10.155.1.22) in a shell/terminal screen on my laptop (NOT in Remote Desktop)
Restrictions:
- Actually i have no right to change the VPN gateway settings. But i can
only change the server settings to achieve this.
Is there any way to do this? I know it exist but my mind confused.
First i have installed Hamachi but this way give me access to server without need of VPN connection. But still i can not directly ping to RTU IP's from my laptop. It did not resolved my problem.
In technically i want to use my server act as a "router" to route/forward incoming requests from my laptop (ICMP & IP packets) to the RTU's IP.
I have researched about how to enable IP MASQUERADE or IP FORWARDING on Ubuntu 16.04. If i am right -technically- it needs 2 NICs or 2 Different IPs on the machine. But i have only one IP (Bonded) on my server.
I need to reach directly to the RTU IP addresses from my laptop and my server should be acting as a router/gateway or etc. to achieve this.
Is there anybody can explain me step-by-step how to do this on Ubuntu?
Click to see picture of my system diagram
vpn ping cisco-vpn ip-forwarding masquerade
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
I have an Ubuntu server (172.10.200.11) and many remote terminal units with simcards and each individual simcard operator using different IP pool such as 10.57.0.0/16 for OP-A, 10.112.0.0/16 for OP-B, etc.
In the server actually i am using a routing table to be able to access the remote terminal units on diffent IP pools. Without this routing table i have no access to the IP pools.
For instance :
10.57.0.0/16 using gw 172.10.238.1
10.112.0.0/16 using gw 172.10.238.2
10.155.0.0/16 using gw 172.10.238.3
And...
Actually i am using "Cisco VPN Client" to access my server IP from outside of datacenter. For this purpose i am making a connection to VPN gateway using "Cisco VPN CLient" application then trying to ping my server's IP 172.10.200.11
I can do the following things successfully from my laptop after my VPN Connection established to VPN Gateway:
- Establish Remote Desktop connection the server's IP:172.10.238.3
- Establish SSH connection from my laptop to the server's IP:172.10.238.3
- ICMP ping to the server's IP:172.10.238.3
- Traceroute to the server's IP:172.10.238.3
For checking the connection (up or down) status of Remote Terminal Units i am connecting to the server via SSH or Remote Desktop then trying to ping to the IP address of Remote Terminal Unit.
Everything is OK until here but this way consumes too much bandwidth especially in case if connect via Remote Desktop connection.
- Connect to VPN Gateway using "Cisco VPN Client" from the laptop
- Establish a Remote Desktop connection to server's IP
- Open Browser in the server on Remote Desktop Connection.
- Enter Remote Terminal Unit (RTU)'s IP (10.155.1.22) on the browser and do what you want!
- Successfullu establish an ICMP ping to the RTU's IP address (10.155.1.22) in a terminal screen on Remote Desktop or in a SSH connection session.
But i want to do following:
- Connect to VPN Gateway using Cisco VPN Client from the laptop
- Open Browser in the laptop
- Enter Remote Terminal Unit's IP (10.155.1.22) on browser and do what you want!
- Successfully establish an ICMP ping to the RTU's IP address (10.155.1.22) in a shell/terminal screen on my laptop (NOT in Remote Desktop)
Restrictions:
- Actually i have no right to change the VPN gateway settings. But i can
only change the server settings to achieve this.
Is there any way to do this? I know it exist but my mind confused.
First i have installed Hamachi but this way give me access to server without need of VPN connection. But still i can not directly ping to RTU IP's from my laptop. It did not resolved my problem.
In technically i want to use my server act as a "router" to route/forward incoming requests from my laptop (ICMP & IP packets) to the RTU's IP.
I have researched about how to enable IP MASQUERADE or IP FORWARDING on Ubuntu 16.04. If i am right -technically- it needs 2 NICs or 2 Different IPs on the machine. But i have only one IP (Bonded) on my server.
I need to reach directly to the RTU IP addresses from my laptop and my server should be acting as a router/gateway or etc. to achieve this.
Is there anybody can explain me step-by-step how to do this on Ubuntu?
Click to see picture of my system diagram
vpn ping cisco-vpn ip-forwarding masquerade
vpn ping cisco-vpn ip-forwarding masquerade
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
edited Apr 4 '17 at 16:11
crackerboy
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
asked Apr 2 '17 at 16:20
crackerboycrackerboy
12
12
iptables and MASQUERADE are (I think) the right track - openVPN creates the 2nd NIC you are thinking of (in this case tun or tap interfaces), and you can masq your pool to your server's IP.
– iwaseatenbyagrue
Apr 4 '17 at 18:04
add a comment |
iptables and MASQUERADE are (I think) the right track - openVPN creates the 2nd NIC you are thinking of (in this case tun or tap interfaces), and you can masq your pool to your server's IP.
– iwaseatenbyagrue
Apr 4 '17 at 18:04
iptables and MASQUERADE are (I think) the right track - openVPN creates the 2nd NIC you are thinking of (in this case tun or tap interfaces), and you can masq your pool to your server's IP.
– iwaseatenbyagrue
Apr 4 '17 at 18:04
iptables and MASQUERADE are (I think) the right track - openVPN creates the 2nd NIC you are thinking of (in this case tun or tap interfaces), and you can masq your pool to your server's IP.
– iwaseatenbyagrue
Apr 4 '17 at 18:04
add a comment |
1 Answer
1
active
oldest
votes
You need to add routes for the 10.57.0.0/16 etc. networks to your VPN client so that they are routed via the server IP. You should be able to add the routes in your VPN server settings. I don't know details on how they would be added in Cisco VPN server.
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f842078%2fhow-to-access-a-host-behind-a-server-over-vpn-ip-forwarding%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You need to add routes for the 10.57.0.0/16 etc. networks to your VPN client so that they are routed via the server IP. You should be able to add the routes in your VPN server settings. I don't know details on how they would be added in Cisco VPN server.
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
add a comment |
You need to add routes for the 10.57.0.0/16 etc. networks to your VPN client so that they are routed via the server IP. You should be able to add the routes in your VPN server settings. I don't know details on how they would be added in Cisco VPN server.
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
add a comment |
You need to add routes for the 10.57.0.0/16 etc. networks to your VPN client so that they are routed via the server IP. You should be able to add the routes in your VPN server settings. I don't know details on how they would be added in Cisco VPN server.
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
You need to add routes for the 10.57.0.0/16 etc. networks to your VPN client so that they are routed via the server IP. You should be able to add the routes in your VPN server settings. I don't know details on how they would be added in Cisco VPN server.
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
answered Apr 2 '17 at 17:21
Tero KilkanenTero Kilkanen
20.7k22844
20.7k22844
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
add a comment |
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
I have installed OpenVPN to my server and now i am connecting first Cisco VPN to access Cisco VPN gateway to redirect or authenticate me to acces my server as usual then connecting to Open VPN (installed on my server) to redirect my packets/route on server but no success. I could not ping to any of RTU's like 10.155.1.22 etc. But directly from server, yes i can ping but from my laptop no!
– crackerboy
Apr 3 '17 at 11:19
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
If I understand your network configuration correct, there is no need for OpenVPN, just addfing routes on the Cisco VPN such that clients know where to send packets to those RTU subnets.
– Tero Kilkanen
Apr 3 '17 at 12:26
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
Do you mean Cisco VPN client or Cisco VPN server (apliance)? In case if you mean Cisco VPN server (most probably), i have no access right to this device. I am only an end user not an administrator! But thanks for your advice.
– crackerboy
Apr 4 '17 at 14:56
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f842078%2fhow-to-access-a-host-behind-a-server-over-vpn-ip-forwarding%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
iptables and MASQUERADE are (I think) the right track - openVPN creates the 2nd NIC you are thinking of (in this case tun or tap interfaces), and you can masq your pool to your server's IP.
– iwaseatenbyagrue
Apr 4 '17 at 18:04