[SOLVED] Can Client OpenVpn see client Forefront TMG VPN?

teseospa

Hi,
I have OpenVpn Server 172.30.1.x on Windows PC 172.27.0.88( Intranet 172.27.X.X )
On Server.Ovpn I have:
push "route 172.27.0.0 255.255.0.0"
On client intranet I run from prompt:
route add 172.30.1.0 mask 255.255.255.0 172.27.0.88

I can ping Intranet client ( behind Server 172.27.0.13 on local intranet ) from OpenVpn client (172.30.1.12).
I can't ping OpenVpn client from Intranet client ( I don't why, I don't need it, but if I can resolve is better )

I have some client of intranet connected to Forefront TMG VPN Server(172.27.0.50) with IP 172.29.0.x
I want ping VPN TMG client 172.29.0.14 from OpenVpn client 172.30.1.12
I tried on Server.Ovpn I have:
push "route 172.29.0.0 255.255.255.0"
It doesn't work.

Can you help me?

Thanks

teseospa

Here's a map to simplify.
From computer B I can ping computer F
From computer F I can't ping computer B
From computer A I can't ping computer F
From computer F I can't ping computer A

teseospa

Previous map was wrong, sorry.
From computer B I can ping computer F
From computer F I can ping computer B
From computer A I can't ping computer F
From computer F I can't ping computer A

janjust

the diagram helps a bit; you're saying

From computer A I can't ping computer F
From computer F I can't ping computer A

but that is all via the Forefront VPN thingie , right? You will need to fix this before continuining your openvpn setup.
(and alas, I know nothing about Forefront).

teseospa

I'm sorry for the mistake :? , of course the Forefront VPN is working and from A can ping F and from F can ping A.

I wrote because A can't ping B and B can't ping A, so client Forefront VPN can't ping client OpenVpn and vice versa

janjust

ah OK...
can the openvpn client ping the forefront VPN server itself on its VPN IP (172.27.x.x.) ?
does the forefront VPN server "know" about the 172.30.x subnet ?

teseospa

Thank you for your advice, I solved the problem.
It was necessary to add this route on forefront VPN server:
"route add 172.30.0.0 mask 255.255.255.0 172.27.0.88"
I also add the 172.30.0.x range to the Internal Interface of Forefront , before it had only 172.27.x.x range ( I hope this does not create problems of broadcasting)

Thanks