Client able to ping server but server unable to ping client

shalabhgoel

Server Configuraton : Centos 6.2 , OPENVPN 2.2.2, iptables turned off

I have run the following command on the server

openvpn --ifconfig 10.200.0.1 10.200.0.2 --dev tun --verb 4

[root@localhost Desktop]# openvpn --ifconfig 10.200.0.1 10.200.0.2 --dev tun --verb 4
Thu Apr 19 10:10:51 2012 us=443427 Current Parameter Settings:
Thu Apr 19 10:10:51 2012 us=443526   config = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=443547   mode = 0
Thu Apr 19 10:10:51 2012 us=443565   persist_config = DISABLED
Thu Apr 19 10:10:51 2012 us=443583   persist_mode = 1
Thu Apr 19 10:10:51 2012 us=443600   show_ciphers = DISABLED
Thu Apr 19 10:10:51 2012 us=443618   show_digests = DISABLED
Thu Apr 19 10:10:51 2012 us=443635   show_engines = DISABLED
Thu Apr 19 10:10:51 2012 us=443652   genkey = DISABLED
Thu Apr 19 10:10:51 2012 us=443670   key_pass_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=443687   show_tls_ciphers = DISABLED
Thu Apr 19 10:10:51 2012 us=443707 Connection profiles [default]:
Thu Apr 19 10:10:51 2012 us=443726   proto = udp
Thu Apr 19 10:10:51 2012 us=443743   local = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=443761   local_port = 1194
Thu Apr 19 10:10:51 2012 us=443778   remote = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=443795   remote_port = 1194
Thu Apr 19 10:10:51 2012 us=443845   remote_float = DISABLED
Thu Apr 19 10:10:51 2012 us=443864   bind_defined = DISABLED
Thu Apr 19 10:10:51 2012 us=443881   bind_local = ENABLED
Thu Apr 19 10:10:51 2012 us=443900   connect_retry_seconds = 5
Thu Apr 19 10:10:51 2012 us=443918   connect_timeout = 10
Thu Apr 19 10:10:51 2012 us=443935   connect_retry_max = 0
Thu Apr 19 10:10:51 2012 us=443954   socks_proxy_server = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=443972   socks_proxy_port = 0
Thu Apr 19 10:10:51 2012 us=443990   socks_proxy_retry = DISABLED
Thu Apr 19 10:10:51 2012 us=444012 Connection profiles END
Thu Apr 19 10:10:51 2012 us=444032   remote_random = DISABLED
Thu Apr 19 10:10:51 2012 us=444050   ipchange = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444068   dev = 'tun'
Thu Apr 19 10:10:51 2012 us=444086   dev_type = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444104   dev_node = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444123   lladdr = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444141   topology = 1
Thu Apr 19 10:10:51 2012 us=444159   tun_ipv6 = DISABLED
Thu Apr 19 10:10:51 2012 us=444177   ifconfig_local = '10.200.0.1'
Thu Apr 19 10:10:51 2012 us=444196   ifconfig_remote_netmask = '10.200.0.2'
Thu Apr 19 10:10:51 2012 us=444214   ifconfig_noexec = DISABLED
Thu Apr 19 10:10:51 2012 us=444233   ifconfig_nowarn = DISABLED
Thu Apr 19 10:10:51 2012 us=444251   shaper = 0
Thu Apr 19 10:10:51 2012 us=444269   tun_mtu = 1500
Thu Apr 19 10:10:51 2012 us=444287   tun_mtu_defined = ENABLED
Thu Apr 19 10:10:51 2012 us=444305   link_mtu = 1500
Thu Apr 19 10:10:51 2012 us=444325   link_mtu_defined = DISABLED
Thu Apr 19 10:10:51 2012 us=444343   tun_mtu_extra = 0
Thu Apr 19 10:10:51 2012 us=444363   tun_mtu_extra_defined = DISABLED
Thu Apr 19 10:10:51 2012 us=444381   fragment = 0
Thu Apr 19 10:10:51 2012 us=444399   mtu_discover_type = -1
Thu Apr 19 10:10:51 2012 us=444417   mtu_test = 0
Thu Apr 19 10:10:51 2012 us=444435   mlock = DISABLED
Thu Apr 19 10:10:51 2012 us=444453   keepalive_ping = 0
Thu Apr 19 10:10:51 2012 us=444471   keepalive_timeout = 0
Thu Apr 19 10:10:51 2012 us=444490   inactivity_timeout = 0
Thu Apr 19 10:10:51 2012 us=444508   ping_send_timeout = 0
Thu Apr 19 10:10:51 2012 us=444527   ping_rec_timeout = 0
Thu Apr 19 10:10:51 2012 us=444545   ping_rec_timeout_action = 0
Thu Apr 19 10:10:51 2012 us=444563   ping_timer_remote = DISABLED
Thu Apr 19 10:10:51 2012 us=444580   remap_sigusr1 = 0
Thu Apr 19 10:10:51 2012 us=444598   explicit_exit_notification = 0
Thu Apr 19 10:10:51 2012 us=444618   persist_tun = DISABLED
Thu Apr 19 10:10:51 2012 us=444635   persist_local_ip = DISABLED
Thu Apr 19 10:10:51 2012 us=444654   persist_remote_ip = DISABLED
Thu Apr 19 10:10:51 2012 us=444671   persist_key = DISABLED
Thu Apr 19 10:10:51 2012 us=444691   mssfix = 1450
Thu Apr 19 10:10:51 2012 us=444709   passtos = DISABLED
Thu Apr 19 10:10:51 2012 us=444732   resolve_retry_seconds = 1000000000
Thu Apr 19 10:10:51 2012 us=444754   username = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444772   groupname = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444791   chroot_dir = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444816   cd_dir = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444834   selinux_context = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444851   writepid = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444868   up_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444886   down_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=444903   down_pre = DISABLED
Thu Apr 19 10:10:51 2012 us=444920   up_restart = DISABLED
Thu Apr 19 10:10:51 2012 us=444937   up_delay = DISABLED
Thu Apr 19 10:10:51 2012 us=444954   daemon = DISABLED
Thu Apr 19 10:10:51 2012 us=444971   inetd = 0
Thu Apr 19 10:10:51 2012 us=444988   log = DISABLED
Thu Apr 19 10:10:51 2012 us=445005   suppress_timestamps = DISABLED
Thu Apr 19 10:10:51 2012 us=445022   nice = 0
Thu Apr 19 10:10:51 2012 us=445039   verbosity = 4
Thu Apr 19 10:10:51 2012 us=445056   mute = 0
Thu Apr 19 10:10:51 2012 us=445073   gremlin = 0
Thu Apr 19 10:10:51 2012 us=445094   status_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445112   status_file_version = 1
Thu Apr 19 10:10:51 2012 us=445129   status_file_update_freq = 60
Thu Apr 19 10:10:51 2012 us=445146   occ = ENABLED
Thu Apr 19 10:10:51 2012 us=445163   rcvbuf = 65536
Thu Apr 19 10:10:51 2012 us=445180   sndbuf = 65536
Thu Apr 19 10:10:51 2012 us=445197   sockflags = 0
Thu Apr 19 10:10:51 2012 us=445214   fast_io = DISABLED
Thu Apr 19 10:10:51 2012 us=445231   lzo = 0
Thu Apr 19 10:10:51 2012 us=445248   route_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445265   route_default_gateway = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445282   route_default_metric = 0
Thu Apr 19 10:10:51 2012 us=445299   route_noexec = DISABLED
Thu Apr 19 10:10:51 2012 us=445318   route_delay = 0
Thu Apr 19 10:10:51 2012 us=445335   route_delay_window = 30
Thu Apr 19 10:10:51 2012 us=445352   route_delay_defined = DISABLED
Thu Apr 19 10:10:51 2012 us=445369   route_nopull = DISABLED
Thu Apr 19 10:10:51 2012 us=445387   route_gateway_via_dhcp = DISABLED
Thu Apr 19 10:10:51 2012 us=445405   max_routes = 100
Thu Apr 19 10:10:51 2012 us=445423   allow_pull_fqdn = DISABLED
Thu Apr 19 10:10:51 2012 us=445441   management_addr = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445458   management_port = 0
Thu Apr 19 10:10:51 2012 us=445476   management_user_pass = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445493   management_log_history_cache = 250
Thu Apr 19 10:10:51 2012 us=445511   management_echo_buffer_size = 100
Thu Apr 19 10:10:51 2012 us=445528   management_write_peer_info_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445546   management_client_user = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445564   management_client_group = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445582   management_flags = 0
Thu Apr 19 10:10:51 2012 us=445599   shared_secret_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445619   key_direction = 0
Thu Apr 19 10:10:51 2012 us=445637   ciphername_defined = ENABLED
Thu Apr 19 10:10:51 2012 us=445654   ciphername = 'BF-CBC'
Thu Apr 19 10:10:51 2012 us=445671   authname_defined = ENABLED
Thu Apr 19 10:10:51 2012 us=445689   authname = 'SHA1'
Thu Apr 19 10:10:51 2012 us=445706   prng_hash = 'SHA1'
Thu Apr 19 10:10:51 2012 us=445723   prng_nonce_secret_len = 16
Thu Apr 19 10:10:51 2012 us=445741   keysize = 0
Thu Apr 19 10:10:51 2012 us=445758   engine = DISABLED
Thu Apr 19 10:10:51 2012 us=445775   replay = ENABLED
Thu Apr 19 10:10:51 2012 us=445792   mute_replay_warnings = DISABLED
Thu Apr 19 10:10:51 2012 us=445829   replay_window = 64
Thu Apr 19 10:10:51 2012 us=445846   replay_time = 15
Thu Apr 19 10:10:51 2012 us=445864   packet_id_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445881   use_iv = ENABLED
Thu Apr 19 10:10:51 2012 us=445898   test_crypto = DISABLED
Thu Apr 19 10:10:51 2012 us=445916   tls_server = DISABLED
Thu Apr 19 10:10:51 2012 us=445933   tls_client = DISABLED
Thu Apr 19 10:10:51 2012 us=445950   key_method = 2
Thu Apr 19 10:10:51 2012 us=445967   ca_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=445984   ca_path = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446001   dh_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446018   cert_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446035   priv_key_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446053   pkcs12_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446070   cipher_list = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446087   tls_verify = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446104   tls_export_cert = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446122   tls_remote = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446139   crl_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446156   ns_cert_type = 0
Thu Apr 19 10:10:51 2012 us=446174   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446191   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446208   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446225   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446242   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446259   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446275   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446292   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446309   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446326   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446343   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446360   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446377   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446394   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446411   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446428   remote_cert_ku[i] = 0
Thu Apr 19 10:10:51 2012 us=446445   remote_cert_eku = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446462   tls_timeout = 2
Thu Apr 19 10:10:51 2012 us=446479   renegotiate_bytes = 0
Thu Apr 19 10:10:51 2012 us=446496   renegotiate_packets = 0
Thu Apr 19 10:10:51 2012 us=446513   renegotiate_seconds = 3600
Thu Apr 19 10:10:51 2012 us=446531   handshake_window = 60
Thu Apr 19 10:10:51 2012 us=446548   transition_window = 3600
Thu Apr 19 10:10:51 2012 us=446565   single_session = DISABLED
Thu Apr 19 10:10:51 2012 us=446582   push_peer_info = DISABLED
Thu Apr 19 10:10:51 2012 us=446599   tls_exit = DISABLED
Thu Apr 19 10:10:51 2012 us=446616   tls_auth_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=446633   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446651   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446668   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446685   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446703   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446720   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446737   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446754   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446772   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446789   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446821   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446839   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446856   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446873   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446890   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446907   pkcs11_protected_authentication = DISABLED
Thu Apr 19 10:10:51 2012 us=446925   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=446943   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=446960   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=446979   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=446996   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447014   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447033   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447050   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447067   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447085   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447102   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447119   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447137   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447154   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447171   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447189   pkcs11_private_mode = 00000000
Thu Apr 19 10:10:51 2012 us=447206   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447223   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447242   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447259   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447276   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447293   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447310   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447327   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447344   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447361   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447378   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447395   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447412   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447429   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447447   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447464   pkcs11_cert_private = DISABLED
Thu Apr 19 10:10:51 2012 us=447482   pkcs11_pin_cache_period = -1
Thu Apr 19 10:10:51 2012 us=447499   pkcs11_id = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=447516   pkcs11_id_management = DISABLED
Thu Apr 19 10:10:51 2012 us=447547   server_network = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447568   server_netmask = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447586   server_bridge_ip = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447605   server_bridge_netmask = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447625   server_bridge_pool_start = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447644   server_bridge_pool_end = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447661   ifconfig_pool_defined = DISABLED
Thu Apr 19 10:10:51 2012 us=447681   ifconfig_pool_start = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447701   ifconfig_pool_end = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447719   ifconfig_pool_netmask = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=447736   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=447754   ifconfig_pool_persist_refresh_freq = 600
Thu Apr 19 10:10:51 2012 us=447771   n_bcast_buf = 256
Thu Apr 19 10:10:51 2012 us=454030   tcp_queue_limit = 64
Thu Apr 19 10:10:51 2012 us=454050   real_hash_size = 256
Thu Apr 19 10:10:51 2012 us=454068   virtual_hash_size = 256
Thu Apr 19 10:10:51 2012 us=454086   client_connect_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454103   learn_address_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454121   client_disconnect_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454138   client_config_dir = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454155   ccd_exclusive = DISABLED
Thu Apr 19 10:10:51 2012 us=454172   tmp_dir = '/tmp'
Thu Apr 19 10:10:51 2012 us=454189   push_ifconfig_defined = DISABLED
Thu Apr 19 10:10:51 2012 us=454209   push_ifconfig_local = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=454227   push_ifconfig_remote_netmask = 0.0.0.0
Thu Apr 19 10:10:51 2012 us=454245   enable_c2c = DISABLED
Thu Apr 19 10:10:51 2012 us=454261   duplicate_cn = DISABLED
Thu Apr 19 10:10:51 2012 us=454278   cf_max = 0
Thu Apr 19 10:10:51 2012 us=454295   cf_per = 0
Thu Apr 19 10:10:51 2012 us=454312   max_clients = 1024
Thu Apr 19 10:10:51 2012 us=454329   max_routes_per_client = 256
Thu Apr 19 10:10:51 2012 us=454346   auth_user_pass_verify_script = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454363   auth_user_pass_verify_script_via_file = DISABLED
Thu Apr 19 10:10:51 2012 us=454380   ssl_flags = 0
Thu Apr 19 10:10:51 2012 us=454397   port_share_host = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454415   port_share_port = 0
Thu Apr 19 10:10:51 2012 us=454431   client = DISABLED
Thu Apr 19 10:10:51 2012 us=454448   pull = DISABLED
Thu Apr 19 10:10:51 2012 us=454466   auth_user_pass_file = '[UNDEF]'
Thu Apr 19 10:10:51 2012 us=454484 OpenVPN 2.2.2 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr  5 2012
Thu Apr 19 10:10:51 2012 us=454617 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Apr 19 10:10:51 2012 us=454637 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Apr 19 10:10:51 2012 us=454666 ******* WARNING *******: all encryption and authentication features disabled -- all data will be tunnelled as cleartext
Thu Apr 19 10:10:51 2012 us=454722 Socket Buffers: R=[112640->131072] S=[112640->131072]
Thu Apr 19 10:10:51 2012 us=456064 TUN/TAP device tun0 opened
Thu Apr 19 10:10:51 2012 us=456115 TUN/TAP TX queue length set to 100
Thu Apr 19 10:10:51 2012 us=456174 /sbin/ip link set dev tun0 up mtu 1500
Thu Apr 19 10:10:51 2012 us=461418 /sbin/ip addr add dev tun0 local 10.200.0.1 peer 10.200.0.2
Thu Apr 19 10:10:51 2012 us=462935 Data Channel MTU parms [ L:1500 D:1450 EF:0 EB:4 ET:0 EL:0 ]
Thu Apr 19 10:10:51 2012 us=462998 Local Options String: 'V4,dev-type tun,link-mtu 1500,tun-mtu 1500,proto UDPv4,ifconfig 10.200.0.2 10.200.0.1'
Thu Apr 19 10:10:51 2012 us=463019 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1500,tun-mtu 1500,proto UDPv4,ifconfig 10.200.0.1 10.200.0.2'
Thu Apr 19 10:10:51 2012 us=463069 Local Options hash (VER=V4): '7d1ae9e5'
Thu Apr 19 10:10:51 2012 us=463096 Expected Remote Options hash (VER=V4): '21fdac94'
Thu Apr 19 10:10:51 2012 us=463130 UDPv4 link local (bound): [undef]:1194
Thu Apr 19 10:10:51 2012 us=463152 UDPv4 link remote: [undef]
Thu Apr 19 10:10:59 2012 us=680370 Peer Connection Initiated with 10.1.3.61:1194
Thu Apr 19 10:10:59 2012 us=680435 Initialization Sequence Completed

Clent Conf: Windows Vista , Openvpn 2.2.2

I have run the following command on the client

openvpn --ifconfig 10.200.0.1 10.200.0.2 --dev tun --remote 10.1.3.59

Client is able to ping but server is unable to ping

tcpdump on the server shows the following

[root@localhost Desktop]# tcpdump -nnvvvXSs 0 -i tun0 udp
tcpdump: listening on tun0, link-type RAW (Raw IP), capture size 65535 bytes
10:16:20.270739 IP6 (hlim 1, next-header UDP (17) payload length: 32) fe80::1565:79ec:c13d:23d2.52626 > ff02::1:3.5355: [udp sum ok] UDP, length 24
	0x0000:  6000 0000 0020 1101 fe80 0000 0000 0000  `...............
	0x0010:  1565 79ec c13d 23d2 ff02 0000 0000 0000  .ey..=#.........
	0x0020:  0000 0000 0001 0003 cd92 14eb 0020 1d0b  ................
	0x0030:  300d 0000 0001 0000 0000 0000 0669 7361  0............isa
	0x0040:  7461 7000 0001 0001                      tap.....
10:16:22.876039 IP6 (hlim 1, next-header UDP (17) payload length: 32) fe80::1565:79ec:c13d:23d2.63538 > ff02::1:3.5355: [udp sum ok] UDP, length 24
	0x0000:  6000 0000 0020 1101 fe80 0000 0000 0000  `...............
	0x0010:  1565 79ec c13d 23d2 ff02 0000 0000 0000  .ey..=#.........
	0x0020:  0000 0000 0001 0003 f832 14eb 0020 29ab  .........2....).
	0x0030:  f8cc 0000 0001 0000 0000 0000 0669 7361  .............isa
	0x0040:  7461 7000 0001 0001                      tap.....

The client ip is 10.1.3.61

Please tell me what can be the problem ??

janjust

reverse the IP addresses on the client; instead of 'openvpn --ifconfig 10.200.0.1 10.200.0.2 --dev tun --remote 10.1.3.59 '
use

openvpn --ifconfig 10.200.0.2 10.200.0.1 --dev tun --remote 10.1.3.59

after that, try pinging the server @ 10.200.0.1

shalabhgoel

I have run the command which you have mentioned on the client system .....

openvpn --ifconfig 10.200.0.2 10.200.0.1 --dev tun --remote 10.1.3.59

Still I am getting the same error

Moreover the server i.e. 10.1.3.59 is continuously sending icmp requests to the client and is unable to ping the client while on the client side i.e. 10.1.3.61, the connection was established successfully and client is able to ping the server at 10.200.0.1 🙁 .

Also the server is able to ping 10.1.3.61 as well as 10.200.0.1 and the client is also able to ping 10.1.3.59 while maintaining the tunnel.

Please help ?

janjust

if the client can ping the server but the server cannot ping the client then there's a firewall on the client blocking access ; make sure the tap-win32 adapter is not set to 'Public' , as Windows will refuse all ICMP traffic to it in that zone/mode.

Also, it is normal that the LAN addresses remain accessible while the VPN is up.

shalabhgoel

Thank You problem solved. The problem was with windows ... I changed the addresses and it worked.