Hi All,
I have a problem and dont know how to resolve this. i hava a
one of the containers runs openvpn. All containers are in the same subnet rangen as also the host.
I have the following problem. When i connect with my vpn server i can do everything as it should except connect to the host.
no ping no nothing true the vpn tunnel to the host machine. (all containers are reachable)
Am i missing a step to make the host available over vpn?
Please show ip a and ip r on the host and inside the openvpn container whilst you are connected to it.
Also please show ip r on your openvpn client machine.
Finally please show lxc network list.
Hi,
Host ip a:
root@esx:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge1 state UP group default qlen 1000
link/ether 3c:7c:3f:d8:ae:a7 brd ff:ff:ff:ff:ff:ff
3: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master bridge0 state UP group default qlen 1000
link/ether 3c:7c:3f:d8:ae:a6 brd ff:ff:ff:ff:ff:ff
altname enp0s31f6
inet 192.168.1.41/24 brd 192.168.1.255 scope global dynamic eno1
valid_lft 834846sec preferred_lft 834846sec
4: bridge0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 68:05:ca:3f:d1:26 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.1/24 brd 192.168.1.255 scope global bridge0
valid_lft forever preferred_lft forever
inet6 2a02:a46a:1c02:1:6a05:caff:fe3f:d126/64 scope global dynamic mngtmpaddr
valid_lft 6992sec preferred_lft 3392sec
inet6 fe80::ecdf:9eff:feda:a32a/64 scope link
valid_lft forever preferred_lft forever
5: bridge1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 0a:ef:ff:30:20:82 brd ff:ff:ff:ff:ff:ff
inet 192.168.2.3/24 brd 192.168.2.255 scope global bridge1
valid_lft forever preferred_lft forever
inet6 fe80::e8e0:9aff:fe53:921e/64 scope link
valid_lft forever preferred_lft forever
7: veth0d9e4f65@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 0e:a7:69:0a:73:27 brd ff:ff:ff:ff:ff:ff link-netnsid 0
8: tap67d22c68: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge1 state UP group default qlen 1000
link/ether f6:55:db:92:01:a0 brd ff:ff:ff:ff:ff:ff
10: veth2418d3e8@if9: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether c6:9f:6b:67:37:68 brd ff:ff:ff:ff:ff:ff link-netnsid 1
14: vethfc4caf9f@if13: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 7a:64:20:08:2f:e8 brd ff:ff:ff:ff:ff:ff link-netnsid 2
16: vethac0b7550@if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether ae:c5:0b:1b:1a:12 brd ff:ff:ff:ff:ff:ff link-netnsid 3
18: veth819f50ce@if17: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether ee:27:eb:86:00:db brd ff:ff:ff:ff:ff:ff link-netnsid 4
20: veth9e66025c@if19: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 66:15:57:3e:01:51 brd ff:ff:ff:ff:ff:ff link-netnsid 5
22: veth159646ed@if21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 22:ae:51:67:ff:0d brd ff:ff:ff:ff:ff:ff link-netnsid 6
23: tapa60d2458: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge1 state UP group default qlen 1000
link/ether 96:54:14:7d:d5:1c brd ff:ff:ff:ff:ff:ff
25: veth82b0de58@if24: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 7e:39:11:34:03:12 brd ff:ff:ff:ff:ff:ff link-netnsid 7
27: veth2e8e7396@if26: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 7a:52:d3:ba:ac:6a brd ff:ff:ff:ff:ff:ff link-netnsid 8
28: tap2c6d8502: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge1 state UP group default qlen 1000
link/ether 4a:31:6a:73:1f:ea brd ff:ff:ff:ff:ff:ff
29: tapc8c76e9c: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge1 state UP group default qlen 1000
link/ether 8e:df:8b:73:7d:39 brd ff:ff:ff:ff:ff:ff
30: tap0264ba0b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge0 state UP group default qlen 1000
link/ether 42:13:d5:d1:0d:80 brd ff:ff:ff:ff:ff:ff
32: vethd46942d9@if31: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 22:7b:38:33:52:7f brd ff:ff:ff:ff:ff:ff link-netnsid 9
34: vethba08e9d8@if33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master bridge1 state UP group default qlen 1000
link/ether 3e:c9:d4:a7:f5:a5 brd ff:ff:ff:ff:ff:ff link-netnsid 10
35: tap058b3799: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge1 state UP group default qlen 1000
link/ether 8e:e0:4f:10:40:29 brd ff:ff:ff:ff:ff:ff
host ip r:
root@esx:~# ip r
default via 192.168.1.3 dev bridge0 onlink
192.168.1.0/24 dev bridge0 proto kernel scope link src 192.168.1.1
192.168.1.0/24 dev eno1 proto kernel scope link src 192.168.1.41
192.168.2.0/24 dev bridge1 proto kernel scope link src 192.168.2.3
ip r on opnsense is not working.
lxc network list:
root@esx:~# lxc network list
+---------+----------+---------+------+------+-------------+---------+-------+
| NAME | TYPE | MANAGED | IPV4 | IPV6 | DESCRIPTION | USED BY | STATE |
+---------+----------+---------+------+------+-------------+---------+-------+
| bridge0 | bridge | NO | | | | 2 | |
+---------+----------+---------+------+------+-------------+---------+-------+
| bridge1 | bridge | NO | | | | 18 | |
+---------+----------+---------+------+------+-------------+---------+-------+
| eno1 | physical | NO | | | | 0 | |
+---------+----------+---------+------+------+-------------+---------+-------+
| enp4s0 | physical | NO | | | | 0 | |
+---------+----------+---------+------+------+-------------+---------+-------+