burbur
Hi - I've exhausted myself looking for a straight answer on this so I decided to ask the pros....
I have an OpenVPN server and an OpenVPN client built on two separate hardware platforms on two different network spaces. I have traffic coming into the client machine from a small number of internet-based IP addresses that get routed onto the tun interface of the client machine. The tunnel is up between the client and the server. I can see (tcpdump) traffic on the tun interface of the client. However, with no SNAT on client-side I do not see that traffic appear on the tun interface of the server. I seem to only get bi-directional traffic through this tunnel when SNAT is used for traffic entering the tun interfaces.
I need to have the source IP of traffic that is forwarded to the client tun interface remain intact (no SNAT).
Assuming that I have all of the routes in place for each tun interface and routing tables (using iroute, etc), should this work?
I can provide more detail on the config, but this seems like the answer to the question would be straight forward assuming the routing is all done the openvpn way (route, push route, iroute in the ccd, etc.).
Thank you very much for any insight.
