Hi all,

Hopefully someone can help with the issue I'm having.

I have a Fedora server at home, which is connected to the internet and two OpenVPNs, one to my own Dedicated Server (centos, 10.10.0.1), and one to my office, no doubt centos too.

Home Server
eth0: internet
eth1: 192.168.0.1
tun0: 10.57.69.62 (work vpn)
tun1: 10.10.0.6 (my vpn)

Dedicated Server
eth0: internet
tun0: 10.10.0.1 (my vpn)

From any machines at home (on 192.168.0.0), I can access machines behind the work VPN since 192.168.0.1 is the default gateway, and the traffic goes right through with no issues.

However, I want to be able to access machines behind my work VPN by connecting to my own VPN (for when I'm away from home).

One 'work' network for example is on 10.64.0.0.

For example, on my Fedora laptop (10.10.0.30), I can't setup a route for 10.64.0.0 to use gw 10.10.0.6...

$ route add -net 10.64.0.0 netmask 255.255.255.0 gw 10.10.0.6
SIOCADDRT: Network is unreachable

so instead I've tried routing traffic to my Dedicated Server via 10.10.0.29 (to P-t-P for my laptops VPN), which atleast works with the route command.

I can see the packets getting to my Dedicated Server (with tcpdump), but then once they reach there, I still can't route them back down my own VPN to the 10.10.0.6 client. The same issue as above crops up when trying to use a VPN client as the gateway.

Both servers (the Dedicated and my home one have ip_forward set.

This is really bugging me now, do I need some iptables rules set on the Dedicated Server since the route command won't accept a VPN client as the gateway?

Thanks,

Rob