I have successfully installed and configured OpenVPN as a (CentOS 6) server, as well as Windows and Linux clients. However, none of these clients can reach each other, and I'm wondering why OpenVPN doesn't configure its routing in the way I think it should (I'm sure it has a perfectly valid reason, but I just don't know it).
On Linux clients:
> route -n
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.1.2.1 0.0.0.0 UG 0 0 0 wlan0
10.0.0.0 0.0.0.0 255.0.0.0 U 2 0 0 wlan0
192.168.0.1 192.168.0.13 255.255.255.255 UGH 0 0 0 tun0
192.168.0.13 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
On Windows clients (only the entries which relate):
> route PRINT -4
Network Destination Netmask Gateway Interface Metric
...
192.168.0.1 255.255.255.255 192.168.0.5 192.168.0.6 31
192.168.0.4 255.255.255.252 On-link 192.168.0.6 286
192.168.0.6 255.255.255.255 On-link 192.168.0.6 286
192.168.0.7 255.255.255.255 On-link 192.168.0.6 286
Any time I try to ping one client from another, I see the "Destination host unreachable" error. In my mind, at least one of these routes should use a 255.255.0.0 netmask, like I've configured in my "server.conf" file:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
server 192.168.0.0 255.255.0.0
ifconfig-pool-persist ipp.txt
keepalive 60 1200
tls-auth ta.key 0 # This file is secret
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append /var/log/openvpn.log
And a sample client conf file (Windows, Linux would look very similar):
client
dev tun
proto udp
remote server.tld 1194
resolv-retry infinite
nobind
persist-key
persist-tun
# Omitting the certificate/key information
ns-cert-type server
tls-auth ta.key 1
comp-lzo
keepalive 60 1200
route-method exe
route-delay 2
What have I done wrong or omitted? (I also may have omitted vital information from the configuration files.)
