kab4yan Hello, I Have VPN Server with topology below: My Client subnet= 10.10.10.0/24 My Client IP = 10.10.10.10/24 My Client VPN IP = 10.20.30.6 --> 10.20.30.5 MY Server Subnet = 10.9.9.0/24 My Server IP = 10.9.9.105/24 My Server VPN IP = inet addr:10.20.30.1 P-t-P:10.20.30.2 My Client route: Destination Gateway Flags Netif Expire default 10.10.10.250 UGS em0 10.9.9.0 10.20.30.5 UGS tun0 10.10.10.0 link#1 U em0 10.10.10.10 link#1 UHS lo0 10.20.30.0 10.20.30.5 UGS tun0 10.20.30.5 link#5 UH tun0 10.20.30.6 link#5 UHS lo0 localhost link#4 UH lo0 My Server route: Destination Gateway Genmask Flags Metric Ref Use Iface 10.20.30.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.9.9.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.10.10.0 10.20.30.2 255.255.255.0 UG 0 0 0 tun0 10.20.30.0 10.20.30.2 255.255.255.0 UG 0 0 0 tun0 169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0 0.0.0.0 10.9.9.9 0.0.0.0 UG 0 0 0 eth0 Client success to ping to server VPN IP PING 10.20.30.1 (10.20.30.1): 56 data bytes 64 bytes from 10.20.30.1: icmp_seq=0 ttl=64 time=2.325 ms 64 bytes from 10.20.30.1: icmp_seq=1 ttl=64 time=3.106 ms 64 bytes from 10.20.30.1: icmp_seq=2 ttl=64 time=3.563 ms Client success to ping to Server subnet: PING 10.9.9.105 (10.9.9.105): 56 data bytes 64 bytes from 10.9.9.105: icmp_seq=0 ttl=64 time=2.376 ms 64 bytes from 10.9.9.105: icmp_seq=1 ttl=64 time=4.519 ms 64 bytes from 10.9.9.105: icmp_seq=2 ttl=64 time=3.662 ms 64 bytes from 10.9.9.105: icmp_seq=3 ttl=64 time=4.011 ms Server success to ping to Client VPN IP PING 10.20.30.6 (10.20.30.6) 56(84) bytes of data. 64 bytes from 10.20.30.6: icmp_seq=1 ttl=64 time=3.76 ms 64 bytes from 10.20.30.6: icmp_seq=2 ttl=64 time=3.43 ms 64 bytes from 10.20.30.6: icmp_seq=3 ttl=64 time=2.95 ms 64 bytes from 10.20.30.6: icmp_seq=4 ttl=64 time=3.25 ms Server unsuccessful to ping to Client subnet PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data. ^C --- 10.10.10.10 ping statistics --- 6 packets transmitted, 0 received, 100% packet loss, time 5517ms My client config: client dev tun proto udp remote xxx.xxx.xxx 1194 ;push "route 10.10.10.0 255.255.255.0" resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ca ca.crt cert client.crt key client.key remote-cert-tls server comp-lzo verb 3 My Server Config: port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh2048.pem server 10.20.30.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 10.9.8.0 255.255.255.0" client-config-dir ccd route 10.10.10.0 255.255.255.0 client-to-client keepalive 10 120 comp-lzo ;max-clients 100 user nobody group nobody persist-key persist-tun status openvpn-status.log log openvpn.log verb 3 ;mute 20 Any any pls? Thx
maikcat post the contents of your client ccd file, also did you enabled ip forwarding on client? firewall rules used on client? Michael
