Hello,
here is my config:
Connections from 192.168.2.1 to 192.168.1.x are ok
10.6.0.1 and 10.6.0.2 are reachable from 192.168.2.1 and 192.168.1.1.
Forwarding on both routers is activated.
why can I not ping the 192.168.2.1 router from 192.168.1.1?
On 192.168.1.1 I tried the way back with this route - but it does not help.
route add -net 192.168.2.0 netmask 255.255.255.0 gw 10.6.0.2 tun0
Moreover, all 192.168.1.x clients should reach 192.168.2.1 (192.168.2.x).
I want that every client can reach every other (192.168.1.x <==> 192.168.2.x).
Do anyony have an idea?
server:
server 10.6.0.0 255.255.255.248
daemon
port 1194
proto udp
dev tun
keepalive 10 60
tls-server
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
tls-auth /etc/openvpn/static.key 0
dh /etc/openvpn/dh2048.pem
;comp-lzo
verb 3
persist-key
persist-tun
topology subnet
client-to-client
route 10.6.0.0 255.255.255.248
route 192.168.1.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
firewall:
iptables -I INPUT -i tun+ -j ACCEPT
iptables -I FORWARD -i tun+ -j ACCEPT
iptables -I OUTPUT -o tun+ -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT
iptables -t nat -A POSTROUTING -o br-lan -j MASQUERADE
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
client:
client
daemon
remote server-ip 1194
proto udp
dev tun
keepalive 10 60
tls-client
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
tls-auth /etc/openvpn/static.key 1
ns-cert-type server
remote-cert-tls server
;comp-lzo
verb 3
persist-key
persist-tun
resolv-retry infinite
pull
route 192.168.2.0 255.255.255.0
firewall:
iptables -I INPUT -i tun+ -j ACCEPT
iptables -I FORWARD -i tun+ -j ACCEPT
iptables -I OUTPUT -o tun+ -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT
iptables -t nat -A POSTROUTING -o br-lan -j MASQUERADE
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
Best Regards
