szabi Hi there! I would need some help to properly set up my openvpn server. My goal is to set up an openvpn server - client config, where clients can connect. After clients are connected, those should have active internet connection (not necessary to route over VPN tunnel, but internet should work for them), they should reach the openvpn server and vice versa openvpn server should reach the clients as well. Right now the client can connect to the server Client has internet Client can ping openvpn server, can do ssh etc. I have some ARM linux based raspberry PI clients which can connect but the server can't reach the client, it can't even ping it. (I have a Mac and when I use the same config, key etc like the raspberry the server can reach my mac without any problems.) Later also if possible I would like to allow multiple clients to connect with the same key/cert at the same time. My server configuration: port 1194 proto udp dev tun0 ca keys/lab/ca.crt cert keys/lab/server.crt key keys/lab/server.key dh keys/lab/dh2048.pem server 10.8.2.0 255.255.255.0 crl-verify keys/lab/crl.pem ifconfig-pool-persist servers/labvpn/logs/ipp.txt cipher AES-256-CBC user nobody group nobody status servers/labvpn/logs/openvpn-status.log log-append servers/labvpn/logs/openvpn.log verb 2 mute 20 max-clients 100 tun-mtu 1500 mssfix 1450 local my server domain management 127.0.0.1 1194 keepalive 10 120 client-config-dir /etc/openvpn/servers/labvpn/ccd tls-server client-to-client comp-lzo persist-key persist-tun ccd-exclusive route 10.8.2.0 255.255.255.0 push "route 10.8.2.0 255.255.255.0" push "dhcp-option DNS 8.8.8.8" Client configuration: client proto udp dev tun ca ca.crt dh dh2048.pem cert client.crt key client.key remote my server IP 1194 cipher AES-256-CBC user nobody group nobody verb 2 mute 20 tun-mtu 1500 mssfix 1450 keepalive 10 120 comp-lzo persist-key persist-tun float resolv-retry infinite nobind pull Thanks!
Traffic szabi wrotethey should reach the openvpn server and vice versa You need to read this carefully: HOWTO: Expanding the scope of the VPN to include additional machines
