Hi all.
Once again dealing with hopefully a last problem.
Everything is working almost perfect (including via the android client) BUT I cannot access any server LAN peers.
Below are the details of my networks' setup:
Server LAN gateway (ISP locked router): 192.168.1.1/24
Server IP: 192.168.1.50/24
Server Distro: OpenSUSE 13.1 x64
Port forwarding (NAT) on router publicIP:51194 -> 192.168.1.50:1194
/proc/sys/net/ipv4/ip_forward = 1
Client LAN gateway (ISP locked router): 192.168.10.254/24
Client IP: 192.168.10.1/24
Client VPN IP: 10.8.0.10/24
Client Distro: OpenSUSE 13.1 x64
Server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/ssl/ca.crt
cert /etc/openvpn/ssl/server.crt
key /etc/openvpn/ssl/server.key # This file should be kept secret
dh /etc/openvpn/ssl/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist /var/run/openvpn/ipp.txt
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
max-clients 5
user nobody
group nobody
persist-key
persist-tun
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log
verb 4
Client.conf
client
dev tun
proto udp
remote xxxx 51194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/ssl/ca.crt
cert /etc/openvpn/ssl/asusClient.crt
key /etc/openvpn/ssl/asusClient.key
ns-cert-type server
comp-lzo
verb 5
Server ifconfig
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
Server routes #route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 enp7s0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 1 0 0 enp7s0
Client ifconfig
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.10 P-t-P:10.8.0.9 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
Client routes
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.10.254 0.0.0.0 UG 0 0 0 eth0
10.8.0.1 10.8.0.9 255.255.255.255 UGH 0 0 0 tun0
10.8.0.9 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
178.59.42.187 192.168.10.254 255.255.255.255 UGH 0 0 0 eth0
192.168.1.0 10.8.0.9 255.255.255.0 UG 0 0 0 tun0
192.168.10.0 0.0.0.0 255.255.255.0 U 1 0 0 eth0
Lan Client routes
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.13 20
10.8.0.0 255.255.255.0 192.168.1.50 192.168.1.13 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.13 192.168.1.13 20
192.168.1.13 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.1.255 255.255.255.255 192.168.1.13 192.168.1.13 20
224.0.0.0 240.0.0.0 192.168.1.13 192.168.1.13 20
255.255.255.255 255.255.255.255 192.168.1.13 192.168.1.13 1
Προεπιλεγμένη πύλη: 192.168.1.1
PING results
From Server 192.168.1.50 -> Lan Client 192.168.1.13 = OK
From Lan Client 192.168.1.13 -> Server Lan IP 192.168.1.50 = OK
From Lan Client 192.168.1.13 -> Server VPN IP 10.8.0.1 = OK
From Server 192.168.1.50 -> VPN Client 10.8.0.10 = OK
From VPN Client 10.8.0.10 -> Server 192.168.1.50 = OK (thanks to push route in server config)
From VPN Client 10.8.0.10 -> Server VPN IP 10.8.0.1 = OK
From VPN Client 10.8.0.10 -> Lan Client 192.168.1.13 =
NO RESPONSE (times out)
Using tcpdump I see that:
The packets from VPN client reach the tun interface on VPN server but NOT the Lan Client,
The packets from Lan Client reach the enp7s0 interface on VPN server but NOT the VPN Client.
I'll post the logs if needed but first let's rule out some stupid configuration mistake from my part.
Thank you in advance.
PS. Using the official openvpn client binary as pointed our very wisely by debbie10t.
