Dear Sirs,
I'm trying to replicate the case "Including multiple machines on the client side when using a routed VPN (dev tun)" but I've some routing (?) problem. Server and client are both Windows 2008R2. Host in client LAN is Windows 8.1.
Client connect successfully to the server and they can ping each other through VPN network, 10.8.0/24.
Server CAN'T ping client LAN interface (192.168.1.192)
Client can ping server LAN interface (192.168.0.4).
Host on client LAN CAN'T ping server lan interface.
Client LAN IP: 192.168.1.192
Server LAN IP: 192.168.0.4 (it's NOT the gateway)
Host LAN IP on Client LAN: 192.168.1.93
Server configuration:
port 89898
proto udp
dev tun
dev-node MyTun
ca "C:\\Program Files\\OpenVPN\\srvkeys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\srvkeys\\server.crt"
key "C:\\Program Files\\OpenVPN\\srvkeys\\server.key"
dh "C:\\Program Files\\OpenVPN\\srvkeys\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
client-config-dir ccd
route 192.168.1.0 255.255.255.0
route 192.168.174.0 255.255.255.0
route 192.168.179.0 255.255.255.0
keepalive 10 120
cipher BF-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Client configuration:
client
dev tun
proto udp
remote myhost.mydomain.com 89898
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert test.crt
key test.key
ns-cert-type server
comp-lzo
verb 3
inside config\ccd on the server, there is a file called "test" with this inside:
iroute 192.168.1.0 255.255.255.0
iroute 192.168.174.0 255.255.255.0
iroute 192.168.179.0 255.255.255.0
Relevant routing on the client (192.168.1.192):
10.8.0.1 255.255.255.255 10.8.0.17 10.8.0.18 30
10.8.0.16 255.255.255.252 On-link 10.8.0.18 286
10.8.0.18 255.255.255.255 On-link 10.8.0.18 286
10.8.0.19 255.255.255.255 On-link 10.8.0.18 286
192.168.0.0 255.255.255.0 10.8.0.17 10.8.0.18 30
Relevant routing on the server (192.168.0.4):
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 30
10.8.0.0 255.255.255.252 On-link 10.8.0.1 286
10.8.0.1 255.255.255.255 On-link 10.8.0.1 286
10.8.0.3 255.255.255.255 On-link 10.8.0.1 286
192.168.1.0 255.255.255.0 10.8.0.2 10.8.0.1 31
192.168.174.0 255.255.255.0 10.8.0.2 10.8.0.1 30
192.168.179.0 255.255.255.0 10.8.0.2 10.8.0.1 30
Relevant routing on host in the client LAN (192.168.1.93):
192.168.0.0 255.255.255.0 192.168.1.192 192.168.1.93 11
IP routing is enabled on both client and server (next on my list there is reaching other hosts in server LAN, so I've already enabled IP routing on the server even if in this phase is useless). I've restarted client and server after enabling, even if it doesn't seem to be necessary:
IP Routing Enabled. . . . . . . . : Yes
Software firewall is disabled in both client and server. OpenVPN version is the 2.3.4-I603 x64 for both client and server.
In lab enviroment I can put static routes in server LAN gateway, but in production enviroment I won't be able to do it, since we will use a cloud data center gateway and I've some limits in customizations. So I'm trying to put all the necessary routing directly on the server. I've added a static route on 192.168.1.93 just for testing, later i will add the routing in the default gateway of client LAN.
To sum up:
10.8.0.18 can ping 10.8.0.1
10.8.0.1 can ping 10.8.0.18
192.168.1.192 can ping 192.168.0.4
192.168.0.4 CAN'T ping 192.168.1.192
192.168.1.93 CAN'T ping 192.168.0.4
Thank you very much in advance for the help.
