I've dabbled with this from time to time but I'd really like to finally get an answer as to what is going on. I have two sites A(10.0.0.0/24) and B(10.10.0.0/24). A is set as the server with B being the client. Currently when everything is up and running all the clients on the B side can reach all the clients on the A side but not the other way around. On the firewall I can connect to the other firewall by the private vpn address but not by any other. What am I missing?
The links for the attached logs are short. I set it to verb 6 did a ping from each side and then shutoff the service.
Summary: ping from 10.10.0.251 to 10.0.0.0/24 works fine
ping from 10.0.0.251 to 10.10.0.0/24 doesn't get through
Server:
port 1195
proto udp
dev tun1
ca keys/blueboywilpigorgca/ca.crt
cert keys/blueboywilpigorgca/angryblueboy.crt
key keys/blueboywilpigorgca/angryblueboy.key
dh keys/blueboywilpigorgca/dh2048.pem
server 10.0.5.0 255.255.255.0
crl-verify keys/blueboywilpigorgca/crl.pem
cipher DES-CBC
user nobody
group nobody
status servers/AngryBlueboy/logs/openvpn-status.log
log-append servers/AngryBlueboy/logs/openvpn.log
verb 2
mute 20
max-clients 100
keepalive 10 120
client-config-dir /etc/openvpn/servers/AngryBlueboy/ccd
client-to-client
comp-lzo
persist-key
persist-tun
ccd-exclusive
push "route 10.0.0.0 255.255.255.0"
route 10.10.0.0 255.255.255.0
servers/AngryBlueboy/ccd/angrylemming:
iroute 10.0.5.0 255.255.255.0
Client:
client
proto udp
dev tun
ca angrylemming/ca.crt
dh angrylemming/dh2048.pem
cert angrylemming/angrylemming.crt
key angrylemming/angrylemming.key
remote x.x.x.x 1195
cipher DES-CBC
user nobody
group nogroup
verb 2
mute 20
keepalive 10 120
comp-lzo
persist-key
persist-tun
float
resolv-retry infinite
nobind
status angrylemming/openvpn-status.log
log-append angrylemming/openvpn.log
links:
http://wilpig.org/temp/config.txt
http://wilpig.org/temp/clientconfig.txt
http://wilpig.org/temp/server-openvpn.log
http://wilpig.org/temp/client-openvpn.log
