[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Need help with openvpn



Svante Signell, le Wed 22 Oct 2014 12:27:26 +0200, a écrit :
> On Wed, 2014-10-22 at 12:16 +0200, Samuel Thibault wrote:
> > Svante Signell, le Wed 22 Oct 2014 12:12:48 +0200, a écrit :
> > > On Tue, 2014-10-21 at 19:44 +0200, Justus Winter wrote:
> > > > Quoting Svante Signell (2014-10-21 17:33:42)
> > > > > > > I use port forwarding to get access to the kvm images, and 10.0.2.2 is
> > > > > > > the gateway address. Each kvm instance has the same address 10.0.2.15,
> > > > > > > with different port numbers.
> > > > > > > 
> > > > > > > So if I want to copy from one image to another I do e.g.
> > > > > > > scp -P 5556 10.0.2.2:file .
> > > > > > 
> > > > > > Ok, that should work indeed.  Do you actually see openvpn instances
> > > > > > connecting to each other in their logs?
> > > > > 
> > > > > No they don't :(
> > > > 
> > > > Afaics you are using openvpn over udp, did you configure udp forwards?
> > > 
> > > According to the manpage forwarding in not needed for pinging. (if I
> > > understood it correctly)
> > 
> > But you want to ping inside the tunnel, so it does not matter what qemu
> > says about pinging: qemu will see UDP trafic from openvpn, not pings.
> 
> I was referring to the openvpn manpage:
> Routing:
> Assuming  you  can  ping across the tunnel, the next step is to route a
> real subnet over the secure tunnel.

Justus was talking about forwarding the UDP trafic produced by openvpn,
(which is UDP, not TCP), not trafic to be injected into openvpn.

Put another way, in your qemu command line, you need a hostfwd with udp:
not tcp:

Samuel


Reply to: