skatkatt Hello, I have a server running in the internet, I build successfully 2 openvpn instances on it, but even whith ip_forward enable, clients can't reach each other. This is my setup : netsrv : XXX.XXX.XXX.XXX dev eth0 scope link 10.100.100.0/30 dev tap0 proto kernel scope link src 10.100.100.1 10.100.101.0/30 dev tap1 proto kernel scope link src 10.100.101.1 /proc/sys/net/ipv4/ip_forward : 1 home 1 : 192.168.0.1 dev eth0 scope link 10.100.100.0/30 dev tap0 proto kernel scope link src 10.100.100.2 10.100.0.0/16 dev tap0 scope link home 2 : 192.168.1.1 dev eth0 scope link 10.100.101.0/30 dev tap0 proto kernel scope link src 10.100.101.2 10.100.0.0/16 dev tap0 scope link ping 10.100.100.1 from 10.100.100.2 : OK ping 10.100.101.1 from 10.100.100.2 : OK ping 10.100.100.1 from 10.100.101.2 : OK ping 10.100.101.1 from 10.100.101.2 : OK ping 10.100.101.2 from 10.100.100.2 : FAIL ping 10.100.100.2 from 10.100.101.2 : FAIL I think i need some iptables nat rules or something but I just can't figure out exactly what. I try the following without any success. Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- anywhere 10.100.101.0/30 to:10.100.101.1 SNAT all -- anywhere 10.100.100.0/30 to:10.100.100.1 Thank you for your time.
janjust in 'tap' mode clients within the same VPN can only see each other if you add client-to-client to the server configuration.
