Redirect traffic from a OpenVPN server to an OpenVPN client running in the same deviceOpenVPN Client and...
What was the first science fiction or fantasy multiple choice book?
Why should I allow multiple IP addresses on a website for a single session?
Is there a word for the act of simultaneously pulling and twisting an object?
Does "boire un jus" tend to mean "coffee" or "juice of fruit"?
How much of a mortgage should I take on to maximize my 5 year financial plan?
What's the point of stochastic volatiliy models if you can use local volatility?
Understanding the as-if rule, "the program was executed as written"
How soon after takeoff can you recline your airplane seat?
German idiomatic equivalents of 能骗就骗 (if you can cheat, then cheat)
Which high-degree derivatives play an essential role?
Any Tips On Writing Extended Recollection In A Novel
"nunca" placement after a verb with "no"
Processes in a session in an interactive shell vs in a script
What is my external HDD doing?
Basis and cardinality
Why did the Apple IIe make a hideous noise if you inserted the disk upside down?
What's the lunar calendar of two moons
How does mmorpg store data?
"in 60 seconds or less" or "in 60 seconds or fewer"?
Is it possible to alias a column based on the result of a select+where?
How to count the number of bytes in a file, grouping the same bytes?
Simplify the code
How does the 'five minute adventuring day' affect class balance?
Enterprise Layers and Naming Conventions
Redirect traffic from a OpenVPN server to an OpenVPN client running in the same device
OpenVPN Client and Server on same machine - Server doesn't allow connections when client is connectedWireguard server with active OpenVPN clientOpenVPN and routing problem on OpenWRTInternet is not working when VPN is upOpenVPN - Understand the routing table + How to route only the traffic to a specific ip via the VPNOpenVPN - Linux client connects but could not access internet, routing issueOpenvpn client cannot ping openvpn server and server lanSSH server also runs OpenVPN client - Inbound SSH times outOpenVPN Client and Server on same machine - Server doesn't allow connections when client is connectedOpenVPN client should only communicate to VPN server via tunnel; rest via regular NICHow to catch conntrack markers correctly?Port forwarding openvpn server to client
I have a raspberry box running an OpenVPN server that I'm using as a way to connect to use my Pihole installation when outside my home network. This is working without issues.
| HOME NETWORK/Pihole |
(Remote client) -- (Open VPN Server ) --- Internet
Separately I have a remote VPN service that I can connect to via an OpenVPN client from the Pi device. That I tested succesfully as well.
| HOME NETWORK/Pihole |
(Open VPN Client ) - VPN provider
I would like to be combine both services such that the final installation would look like this
| HOME NETWORK /Pihole |
(Remote client) -- (Open VPN Server) -- (Open VPN Client) --- Remote VPN service
I have tried solutions like the one described in this similar question (Wireguard server with active OpenVPN client) with negative similar results: Once you activate the Open VPN client (tun1) the server (tun0) becomes unrecheable.
Here's what the routing table looks like when both intefaces tun[01] are up
0.0.0.0/1 via 10.50.11.5 dev tun1
default via 192.168.1.1 dev wlan0 src 192.168.1.164 metric 303
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
10.50.11.1 via 10.50.11.5 dev tun1
10.50.11.5 dev tun1 proto kernel scope link src 10.50.11.6
128.0.0.0/1 via 10.50.11.5 dev tun1
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.164 metric 303
199.116.115.135 via 192.168.1.1 dev wlan0
Here's the current output of my openvpn server when I try to connect.
pi@raspberrypi:/etc/openvpn $ sudo more openvpn-status.log
OpenVPN CLIENT LIST
Updated,Sat Jun 29 23:30:41 2019
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
UNDEF,x.x.x.x:39159,860,442,Sat Jun 29 23:30:02 2019
This is what the error log looks like
Sat Jun 29 23:34:47 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]172.58.87.22:28162
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1 / time = (1561869285) Sat Jun 29 23:34:45 2019 ] -- see the man page entry for --no-replay and --replay-window for more
info or silence this warning with --mute-replay-warnings
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x:28162
Apparently the client connection is getting corrupted?
edit: I also tried the solution in OpenVPN Client and Server on same machine - Server doesn't allow connections when client is connected which I discovered after posting this question to no avail. This would appear to be directly related to my issue but it's still not working. Here's what the server log looks like
openvpn
New contributor
add a comment |
I have a raspberry box running an OpenVPN server that I'm using as a way to connect to use my Pihole installation when outside my home network. This is working without issues.
| HOME NETWORK/Pihole |
(Remote client) -- (Open VPN Server ) --- Internet
Separately I have a remote VPN service that I can connect to via an OpenVPN client from the Pi device. That I tested succesfully as well.
| HOME NETWORK/Pihole |
(Open VPN Client ) - VPN provider
I would like to be combine both services such that the final installation would look like this
| HOME NETWORK /Pihole |
(Remote client) -- (Open VPN Server) -- (Open VPN Client) --- Remote VPN service
I have tried solutions like the one described in this similar question (Wireguard server with active OpenVPN client) with negative similar results: Once you activate the Open VPN client (tun1) the server (tun0) becomes unrecheable.
Here's what the routing table looks like when both intefaces tun[01] are up
0.0.0.0/1 via 10.50.11.5 dev tun1
default via 192.168.1.1 dev wlan0 src 192.168.1.164 metric 303
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
10.50.11.1 via 10.50.11.5 dev tun1
10.50.11.5 dev tun1 proto kernel scope link src 10.50.11.6
128.0.0.0/1 via 10.50.11.5 dev tun1
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.164 metric 303
199.116.115.135 via 192.168.1.1 dev wlan0
Here's the current output of my openvpn server when I try to connect.
pi@raspberrypi:/etc/openvpn $ sudo more openvpn-status.log
OpenVPN CLIENT LIST
Updated,Sat Jun 29 23:30:41 2019
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
UNDEF,x.x.x.x:39159,860,442,Sat Jun 29 23:30:02 2019
This is what the error log looks like
Sat Jun 29 23:34:47 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]172.58.87.22:28162
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1 / time = (1561869285) Sat Jun 29 23:34:45 2019 ] -- see the man page entry for --no-replay and --replay-window for more
info or silence this warning with --mute-replay-warnings
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x:28162
Apparently the client connection is getting corrupted?
edit: I also tried the solution in OpenVPN Client and Server on same machine - Server doesn't allow connections when client is connected which I discovered after posting this question to no avail. This would appear to be directly related to my issue but it's still not working. Here's what the server log looks like
openvpn
New contributor
add a comment |
I have a raspberry box running an OpenVPN server that I'm using as a way to connect to use my Pihole installation when outside my home network. This is working without issues.
| HOME NETWORK/Pihole |
(Remote client) -- (Open VPN Server ) --- Internet
Separately I have a remote VPN service that I can connect to via an OpenVPN client from the Pi device. That I tested succesfully as well.
| HOME NETWORK/Pihole |
(Open VPN Client ) - VPN provider
I would like to be combine both services such that the final installation would look like this
| HOME NETWORK /Pihole |
(Remote client) -- (Open VPN Server) -- (Open VPN Client) --- Remote VPN service
I have tried solutions like the one described in this similar question (Wireguard server with active OpenVPN client) with negative similar results: Once you activate the Open VPN client (tun1) the server (tun0) becomes unrecheable.
Here's what the routing table looks like when both intefaces tun[01] are up
0.0.0.0/1 via 10.50.11.5 dev tun1
default via 192.168.1.1 dev wlan0 src 192.168.1.164 metric 303
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
10.50.11.1 via 10.50.11.5 dev tun1
10.50.11.5 dev tun1 proto kernel scope link src 10.50.11.6
128.0.0.0/1 via 10.50.11.5 dev tun1
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.164 metric 303
199.116.115.135 via 192.168.1.1 dev wlan0
Here's the current output of my openvpn server when I try to connect.
pi@raspberrypi:/etc/openvpn $ sudo more openvpn-status.log
OpenVPN CLIENT LIST
Updated,Sat Jun 29 23:30:41 2019
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
UNDEF,x.x.x.x:39159,860,442,Sat Jun 29 23:30:02 2019
This is what the error log looks like
Sat Jun 29 23:34:47 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]172.58.87.22:28162
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1 / time = (1561869285) Sat Jun 29 23:34:45 2019 ] -- see the man page entry for --no-replay and --replay-window for more
info or silence this warning with --mute-replay-warnings
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x:28162
Apparently the client connection is getting corrupted?
edit: I also tried the solution in OpenVPN Client and Server on same machine - Server doesn't allow connections when client is connected which I discovered after posting this question to no avail. This would appear to be directly related to my issue but it's still not working. Here's what the server log looks like
openvpn
New contributor
I have a raspberry box running an OpenVPN server that I'm using as a way to connect to use my Pihole installation when outside my home network. This is working without issues.
| HOME NETWORK/Pihole |
(Remote client) -- (Open VPN Server ) --- Internet
Separately I have a remote VPN service that I can connect to via an OpenVPN client from the Pi device. That I tested succesfully as well.
| HOME NETWORK/Pihole |
(Open VPN Client ) - VPN provider
I would like to be combine both services such that the final installation would look like this
| HOME NETWORK /Pihole |
(Remote client) -- (Open VPN Server) -- (Open VPN Client) --- Remote VPN service
I have tried solutions like the one described in this similar question (Wireguard server with active OpenVPN client) with negative similar results: Once you activate the Open VPN client (tun1) the server (tun0) becomes unrecheable.
Here's what the routing table looks like when both intefaces tun[01] are up
0.0.0.0/1 via 10.50.11.5 dev tun1
default via 192.168.1.1 dev wlan0 src 192.168.1.164 metric 303
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
10.50.11.1 via 10.50.11.5 dev tun1
10.50.11.5 dev tun1 proto kernel scope link src 10.50.11.6
128.0.0.0/1 via 10.50.11.5 dev tun1
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.164 metric 303
199.116.115.135 via 192.168.1.1 dev wlan0
Here's the current output of my openvpn server when I try to connect.
pi@raspberrypi:/etc/openvpn $ sudo more openvpn-status.log
OpenVPN CLIENT LIST
Updated,Sat Jun 29 23:30:41 2019
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
UNDEF,x.x.x.x:39159,860,442,Sat Jun 29 23:30:02 2019
This is what the error log looks like
Sat Jun 29 23:34:47 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]172.58.87.22:28162
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1 / time = (1561869285) Sat Jun 29 23:34:45 2019 ] -- see the man page entry for --no-replay and --replay-window for more
info or silence this warning with --mute-replay-warnings
Sat Jun 29 23:34:48 2019 x.x.x.x:28162 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x:28162
Apparently the client connection is getting corrupted?
edit: I also tried the solution in OpenVPN Client and Server on same machine - Server doesn't allow connections when client is connected which I discovered after posting this question to no avail. This would appear to be directly related to my issue but it's still not working. Here's what the server log looks like
openvpn
openvpn
New contributor
New contributor
edited 8 mins ago
Proto
New contributor
asked 48 mins ago
ProtoProto
11 bronze badge
11 bronze badge
New contributor
New contributor
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Proto is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f527697%2fredirect-traffic-from-a-openvpn-server-to-an-openvpn-client-running-in-the-same%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Proto is a new contributor. Be nice, and check out our Code of Conduct.
Proto is a new contributor. Be nice, and check out our Code of Conduct.
Proto is a new contributor. Be nice, and check out our Code of Conduct.
Proto is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f527697%2fredirect-traffic-from-a-openvpn-server-to-an-openvpn-client-running-in-the-same%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown