Hello!
I set up vpn between two hosts, both behind nat (port forwarding set up for "server") and I have following behavior:
Host from "192.168.1.0", lets call it server net(and server itself will be 1.254), can ping and access host from "192.168.2.0", lets call it client net (and openvpn client will be 2.254). No problem here, everything looks fine.
But, when host from "192.168.2.10" tries to ping / access host from "192.168.1.10" - there is no reply.
I checked routing and it looks fine, so I took tcpdump to see what happening on interfaces and to find place where problem is.
And found that traffic successfully reaches from 2.10 to 1.10, but never comes backs, seems to be dropped by client for some unknown reason.
All client in "192.168.1.0" shares same behavior - they can access 2.0 net, but they cant be access by 2.0.
Can someone help me to find out why clients drop traffic from 2.0?
OpenVPN server configuration:
port 1194
proto udp
dev tun
client-to-client
client-config-dir ccd
route 192.168.2.0 255.255.255.0
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 3
ccd/client contents
iroute 192.168.2.0 255.255.255.0
OpenVPN client configuration:
client
dev tun
proto udp
remote 11.22.33.44 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/user.crt
key /etc/openvpn/user.key
ns-cert-type server
comp-lzo
log /var/log/openvpn.log
verb 3
