SOLVED Help with VPN and IOcage VLAN jails

[Surpher]

Hi All,

I'm having an issue with connecting to my vnet jails over openvpn. Let me describe my setup:

Code:

Router box (10.20.30.1) runs OpenVPN server (10.8.0.0)
|
* Freenas (igb1 ethernet iface) (bridge0 has igb1 and all vnet0 interfaces for jails)
   |
   *  Sample jail (vnet0:1)

When I'm on my LAN I can connect with the jails no problem.
When I'm on a remote network, and OpenVPN client to the router I can connect to any real box including the freenas box. However, I'm not able to ping or connect in any way to the jails.

If I ssh into the freenas box and run tcpdump, ping requests look like this:

Code:

root@freenas:/mnt/iocage/jails # tcpdump -nni igb1 icmp -vvv
tcpdump: listening on igb1, link-type EN10MB (Ethernet), capture size 262144 bytes
12:14:46.345234 IP (tos 0x0, ttl 63, id 37872, offset 0, flags [none], proto ICMP (1), length 84)
	10.8.0.2 > 10.20.30.50: ICMP echo request, id 59699, seq 0, length 64
12:14:47.345708 IP (tos 0x0, ttl 63, id 54233, offset 0, flags [none], proto ICMP (1), length 84)
	10.8.0.2 > 10.20.30.50: ICMP echo request, id 59699, seq 1, length 64

Where 10.8.0.2 is the ip assigned to the VPN client and 10.20.30.50 is a jail. And it appears that the jail is not responding.

Can anyone give any guidance on how to debug or solve this problem?

Thanks

 

[Surpher]

This was something dumb, the vnets all had the wrong subnet mask. So the fix was to edit the config.json and append "/24" to each ip address.