August 22, 20187 yr Hey all, I've got a unifi USG as my router. I've set up a VPN server on that and i'm able to connect just fine. I can also connect to any non unraid-VM hosts on my network.(e.g. i can connect to my unraid server, my router, my dns server, etc). But for some reason I cant connect to any virtual hosts that are running in unraid. the application i'm running needs to be accessible when away from home, but i'd rather not just put it on the internet and home apache and the application running on it is secure. my unraid host is on a 192.168.1.0/24 address the vm i'm trying to access also has a IP in that same CIDR my vpn connection is on a 10.0.0.0/24 subnet I've got 4 interfaces on my unraid server, 2 of them are a bridged pair, one is used for another project, and one is idle all 4 of them are on the 192 subnet I've done a good deal of research and after following a few other threads here to dead ends and after some additional fruitless google-fu, I figured i'd ask for help here. Given we are talking about traversing subnets, I think i have a routing problem. My current ideas are: I either have to set up some routes on the vm to push the traffic from the 192 gateway to the 10. network? -or- I need to configure some routes within the unraid network settings to push the bridge traffic to the 10. network? I'm a fairly capable linux admin, but the virtualized networking of unraid is throwing me for a loop. Any ideas or feedback would be greatly appreciated. ~back to traceroute~ -Crobo
August 22, 20187 yr Author Hmmmmm i'll explore that route. I've got an update, i connected a client to the vpn through an outside connection nmaped the 10. network, and found the IP of my host. ran a TCP dump on my VM while pinging from that host. I can see the ICMP traffic start flowing with a source address of 10.0.0.1(the gateway of the VPN subnet). The ping comes back withing a few 100ms on the vpn host. OK so we have basic network connectivity over ICMP, what about HTTP(s)? ran a TCP dump on VM tried to hit my application via chrome on the VPN host Great! i've got traffic over port 80 coming from the VPN gateway IP. BUT still no love on my application loading. What about connections initiated from the VM? ping my vpn host ping 10.0.0.2 PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. From 10.240.160.173 icmp_seq=5 Packet filtered Hmmmmm so i'm not getting traffic back? I checked IP tables for anything obvious and saw nothing there. Is seems like either host can sent traffic and it gets through, but it's lost on the return trip. I'm leaning back towards a routing problem, but i'm not sure if that 'packet filtered' is just something filtering the icmp traffic in between(as is common). I'm also not sure if maybe my apache server's config is busted? back to the shell I go... edit 1: OK, so I just ran netstat and I've got an established session back to the gatewayIP of my VPN network. (also: I changed the address space of my vpn network back to a 192) tcp6 0 1340 192.168.1.181:https 192.168.2.1:48456 ESTABLISHED I'm beginning to think the issue is with the application? edit2: ok i think it's a routing issue, I think I need to add static routes on my vpn client https://community.ubnt.com/t5/UniFi-Routing-Switching/VPN-routing-to-LAN/td-p/1987216/page/2 Edited August 22, 20187 yr by crobo
Archived
This topic is now archived and is closed to further replies.