Net to Net, cannot ping from server to client

gian

hello All,

I had a N2N OpenVPN setup with two Ipfire gateways, one acting as server, one acting as client, and it was working fine.
The client had a hardware failure so I reinstalled from scratch.
In the Ipfire environment, once you have the server running, you download a client package with the .conf file and certificate, so there should be little chance to do it wrong.
However, I got the VPN up and running, but while I can see all my hosts on the server side from the client LAN, I can't do it viceversa, i.e. can't see the client side hosts from the server LAN.

Here is the client .conf file:
# IPFire n2n Open VPN Client Config by ummeegge und m.a.d
#
# User Security
user nobody
group nobody
persist-tun
persist-key
script-security 2
# IP/DNS for remote Server Gateway
remote 89.xx.xx.xx
float
# IP adresses of the VPN Subnet
ifconfig 10.0.11.2 10.0.11.1
# Server Gateway Network
route 192.168.1.0 255.255.255.0
# tun Device
dev tun
# Port and Protokoll
port 1195
proto udp
# Paketsize
tun-mtu 1400
# Auth. Client
tls-client
# Cipher
cipher AES-256-CBC
pkcs12 /var/ipfire/ovpn/certs/ferrara125.p12
# Enable Compression
comp-lzo
# Debug Level
verb 3
# Tunnel check
keepalive 10 60
# Start as daemon
daemon ferrara125n2n
writepid /var/run/ferrara125n2n.pid
# Activate Management Interface and Port
# management localhost 4711
# remsub 192.168.2.0/255.255.255.0

What can I do to troubleshoot the situation.

Thanks for reading,
-Gain

gian

just to rule out routing problems, here is the server routing table:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.10.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.0.11.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun1
192.168.2.0 10.0.11.2 255.255.255.0 UG 0 0 0 tun1
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 green0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 red0
10.0.10.0 10.0.10.2 255.255.255.0 UG 0 0 0 tun0
0.0.0.0 192.168.0.2 0.0.0.0 UG 0 0 0 red0

and here is the client routing table:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
81.174.xx.xx 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
10.0.11.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 green0
192.168.1.0 10.0.11.1 255.255.255.0 UG 0 0 0 tun0
0.0.0.0 81.174.xx.xx 0.0.0.0 UG 0 0 0 ppp0

Mimiko

Did you enabled on client forwarding? How about firewall?

gian

Mimiko,

thanks for your kind reply.

I have fixed the problem resetting all Ipfire OpenVpn setup, and did it over from scratch.

I don't know what happened in between, but now it works.

I didn't post the issue as "solved", because I cannot say how it was fixed.

worm6666

hi gian

what do You mean with the

gian wrotefixed the problem resetting all Ipfire OpenVpn setup, and did it over from scratch...

???

can You please describe what You done on both firewalls ?

I have same problem with N2N tunnel between 2 IPFIRE devices - from CLIENT LAN I can see HOST LAN, but not viceversa :-(

Thank You.

worm6666

should delete this because wrong post... sorry.