Hello everyone,
I'm trying to set-up a VPN connection where the client can reach the server and vice-versa, and that the server can reach beyond the client pc (in my test setting i would like to be able to ping 192.168.1.210 (that is a pc on the client network) from the server.) The server and the client are both Ubuntu servers with openvpn installed.
Connecting to the server and the client works fine. However connecting to a desktop in the client network from the server is impossible! I did a TCPdump to check, and the ping packets are moving from the server to the client on the tun0 adapter. But it stops there. It doesn't forward it to it's eth0 adapter to forward the packets and so my pings fail.
It's like this:
Server --------------> Client
tun0: 192.168.2.1/24 tun0:192.168.2.5/24
eth0: 10.0.0.3/24 eth0:192.168.1.148/24
And here are my configs:
server.conf on server
port 1194
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 192.168.2.0 255.255.255.0
client-config-dir ccd
route 192.168.1.192 255.255.255.224
comp-lzo
status openvpn-status.log
verb 5
mute 20
log openvpn.log
ccd/client file on server:
iroute 192.168.1.192 255.255.255.224
client.conf on client
client
dev tun0
proto udp
remote 192.168.1.127 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
comp-lzo
verb 3
log openvpn.log
