Hi,
I have 2 separate offices that I try to connect using a openvpn connection.
Network BEOM: 192.168.1.0/24
Network BEVO: 192.168.2.0/24
I've set up the openvpn Acces Server at 192.168.1.9, and enabled the right portforwardings at BEOM's router
at the OA server, i've added following settings:
- VPN mode: layer 3
- Dynamic IP Address Network: 192.168.10.0/24
- Routin/Should VPN clients have access to private subnets (non-public networks on the server side)? Yes, using NAT
- Routing/Specify the private subnets to which all clients should be given access (as 'network/netmask_bits', one per line):
192.168.1.0/24
192.168.2.0/24
- Routing/Should clients be allowed to access network services on the VPN gateway IP address? Yes
- Should clients be able to communicate with each other on the VPN IP Network? Yes
User settings:
- Auto login
- Dynamic IP
- Select addressing method: NAT
- Allow Access To these Networks: 192.168.1.0/24
- Allow Access From: all server-side private subnets
- Allow Access From: all other VPN clients
- Configure VPN Gateway: Yes
- Allow client to act as VPN gateway for these client-side subnets: 192.168.2.0/24
I've added static routing on both routers
At BEOM: 192.168.2.0/24 -> 192.168.1.9
At BEVO: 192.168.1.0/24 -> 192.168.2.4
At BEVO, i've shared the openvpn connection (Internet Connection Sharing), to make sure other computers can access the connection.
Now, from network BEVO (192.168.2.0/24) everything works fine. I can ping all computers at the BEOM (192.168.1.0/24) side.
From the BEOM (192.168.1.0/24) side, I can't connect or ping to any BEVO (192.168.2.0/24) device. Even on the openvpn access server, I can't ping the openvpn client's local IP (192.168.2.4).
Anyone can point me at the possible mistake i've made? Did I need to configure anything else on the openvpn access server at BEOM?
I don't think this has anything to do with routing, because I can't even ping from the openvpn access server at BEOM (192.168.1.9) to the client at BEVO (192.168.2.4). But the other way around works perfect.
Thank you in advance for the help!
