Hi all,
I need some advice on this.
Currently i have set up client and server openvpn.
I am getting this problem when i try to ping a host reside behind the server vpn.
here my server conf
port 700
proto tcp
dev tun
ca /etc/openvpn/easyrsa/easyrsa3/pki/ca.crt
cert /etc/openvpn/easyrsa/easyrsa3/pki/issued/server2.crt
key /etc/openvpn/easyrsa/easyrsa3/pki/private/server.key
dh /etc/openvpn/easyrsa/easyrsa3/pki/dh.pem
server 10.9.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.20.43.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
here is my client conf
client
dev tun
proto tcp
remote 54.169.28.112 700
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert witnessnat-1.crt
key witnessnat1.key
comp-lzo
verb 3
My iptables is flush. Routing is as follows iin server.
0.0.0.0 10.20.42.17 0.0.0.0 UG 0 0 0 eth0
0.0.0.0 10.20.42.1 0.0.0.0 UG 10001 0 0 eth1
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.20.42.0 0.0.0.0 255.255.255.240 U 0 0 0 eth1
10.20.42.16 0.0.0.0 255.255.255.240 U 0 0 0 eth0
When i want to ping 10.20.42.230 from my client (windows) , i can't ping host at all.
This is the tcpdump.
03:25:42.883356 IP 10.8.0.6 > 10.20.42.200: ICMP echo request, id 1, seq 10259, length 40
03:25:42.967828 IP 10.8.0.6 > 10.20.42.230: ICMP echo request, id 1, seq 10260, length 40
03:25:47.883408 IP 10.8.0.6 > 10.20.42.200: ICMP echo request, id 1, seq 10261, length 40
03:25:47.967367 IP 10.8.0.6 > 10.20.42.230: ICMP echo request, id 1, seq 10262, length 40
The weird part is in another nat server of mine.I able to reach(with the same config , same settings).So i am totally clueless about this.
Please advice.
