Hello all,
I'm searching since few days a solution to a problem I have with my config :
I would like to reach the client connected to the server through the VPN but currently :
I can't ping the client from the server (10.8.0.1).
I can ping the server from the client(10.8.0.4)
Server :
port 46248
local 127.0.0.1 46248 udp
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
tls-auth ta.key 0
dh dh2048.pem
server 10.8.0.0 255.255.255.0
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
topology subnet
client-to-client
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 5
client:
setenv FORWARD_COMPATIBLE 1
client
server-poll-timeout 4
nobind
remote x.x.x.x 46248 udp
dev tap
dev-type tap
ns-cert-type server
reneg-sec 604800
sndbuf 100000
rcvbuf 100000
comp-lzo no
verb 5
setenv PUSH_PEER_INFO
ca /etc/openvpn/ca.crt
cert /etc/openvpn/r0.crt
key /etc/openvpn/r0.key
tls-auth /etc/openvpn/ta.key 1
log /etc/openvpn/openvpn.log
server :
tap0 Link encap:Ethernet HWaddr 86:eb:0d:3a:87:67
inet addr:10.8.0.1 Bcast:10.8.0.255 Mask:255.255.255.0
inet6 addr: fe80::84eb:dff:fe3a:8767/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:508 (508.0 B)
client :
tap0 Link encap:Ethernet HWaddr c2:cf:de:6c:81:5f
inet addr:10.8.0.4 Bcast:10.8.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:20 errors:0 dropped:2 overruns:0 frame:0
TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:1400 (1.3 KiB) TX bytes:1008 (1008.0 B)
I'm running the server on a Ubunto and the client on a Raspbian. By the way i'm not sure I need the tap instead the tun. I just want to use the server as a VPN for internet traffic and a dedicated application that needs datas from my client.
I'm sorry if this question has been raised before but the search engine doesn't like "server ping client" 😉
A Huge thanks in advance for the help 🙂
Piloutech
