So here is my situation. I have an openvpn instance in an AWS environment with a couple of other servers in that same environment. I'm probably going about this all the wrong way because i don't know linux or openvpn but here goes. On the Routing section of the VPN settings page of the admin site, if i choose, 'using NAT', then the VPN clients (without routing all traffic through the vpn) can ping the the private subnet of the openvpn server and the other servers on that private interfaces network.
So then:
VPN Client (172.0.0.0)----ICMP----->OPENVPNSERVER(192.168.10.xxx)
also
VPN Client (172.0.0.0)----ICMP----->OPENVPNSERVER(192.168.10.xxx)-------->windowsADserver(192.168.10.xxx)
also
VPN Client (172.0.0.0)----ICMP----->OPENVPNSERVER(192.168.10.xxx)-------->windowsADserver(192.168.10.xxx)=======Tunnel==========Coporate Subnet(10.0.10.x)
All that works. But traffic in the opposite direction is a no go.
Now if i change the setting On the Routing section of the VPN settings page of the admin site to 'using routing (advanced)' the vpn client can no longer make those pings. However, if i monkey with the route tables of the windowsADserver(192.168.10.xxx) i can make it ping a vpn client. Mind you it is seriously clunky and not the ultimate config i will use but i'm at this point only trying to get proof of concept.
While making all these changes i monitor the iptables of the openvpn server i do see my private subnets specified in the
Specify the private subnets to which all clients should be given access (as 'network/netmask_bits', one per line):
section move around from one table to another but there are several tables and it is quite honestly too confusing for my small brain.
I even went so far as to flush out all the rules and make the tables allow everything but within seconds of doing that the server recreated all the tables again.
I am an admitted MS tech. I dont' know linux in the least and have been doing my best to try and diag this but to no avail. I simply need someone to please hold my hand and walk me through this. Could someone please help me?
