VPN issues with CentOS7 client and server

Comradin

Hello,

What Im trying to achieve is to 'export' a mysql instance on my openvpn server to the connected clients.

Both, server and client, are running CentOS7 with openvpn 2.3.8. I have setup the server, ca and one client is already connected to the server. I do not redirect the default gateway through the vpn, My goal is to route just the vpn net (10.8.0.0/24) between the server and the clients. But, I would not be writing these lines if everything would be working fine.

My client is connected to the vpn server. The client can ping the ip address of the vpn server and the server can ping the client ip.
10.8.0.1 (server) <-- ping --> (client) 10.8.0.2

But I cannot access the database on the server:
# telnet 10.8.0.1 3306
Trying 10.8.0.1...
telnet: connect to address 10.8.0.1: No route to host

No route to host? On the client side I have:
# ip r l
default via a.b.c.d dev eth0
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.2

On the server side I have this:
# ip r l
default via d.e.f.g dev eth0
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1

My server config:
port 1194
proto udp
dev tun
ca ca.crt
cert EasyRSA.crt
key EasyRSA.key # This file should be kept secret
dh dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
max-clients 10
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

The client config looks like this:
client
dev tun
proto udp
remote d.e.f.g 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client01.crt
key client01.key
remote-cert-tls server
comp-lzo
verb 3

Im not quite sure, where or what to look for, what was configured wrong by me? Any hints or suggestions?

regards,
/mf

Traffic

Comradin wroteMy client is connected to the vpn server. The client can ping the ip address of the vpn server and the server can ping the client ip.
10.8.0.1 (server) <-- ping --> (client) 10.8.0.2

But I cannot access the database on the server:
# telnet 10.8.0.1 3306
Trying 10.8.0.1...
telnet: connect to address 10.8.0.1: No route to host

Maybe there is a typo in your "telnet" command ...

TiTex

you should check if mysql is listening for tcp/ip connections , by default i think it doesn't
and also check firewall configurations, although the "No route to host" is kind of strange for this situation , the error should be something like "timed out"