Site to Site VPN

yournamezz

Hello,

First of all I hope i'm opening this topic on the right place. Correct me if i'm wrong.
I followed this tutorial to get a site to site VPN up and running: https://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/site-to-site-layer-3-routin-using-openvpn-access-server/

Here's my situation. I have a OpenVPN Access Server running at my main location, called location A. At location B I have a Linux server running a OpenVPN client. Using the tutorial above i managed to transform it to a site to site VPN connection. However there is a problem with the connection. I only can send ICMP messages from site B to site A. Sending ICMP messages from site A to site B is not possible.

I think it has something to do with permissions on the tunnel connection, but I can seem to resolve it. I've been working on this specific issue for many hours but I can't fix it. Can somebody please help me or give me at least a directorion to look at. All help will be appriciated very much!

Kind regards,

Yournamezz

TiTex

what OS do you use for the client ?
i think the most common issue is a client side firewall , so start from there

yournamezz

I'm very sorry for wasting all your time. It turned out it was a routing issue on site B. De static route that I put on the default gateway was wrong.

astclair

Verify that you have done this step:

If so, then in the OpenVPN Access Server webui, go to VPN Settings > Routing > select "Yes, using routing (advanced)", specify the Site A ip pool, and then CHECK the box labeled "Allow access from these private subnets to all VPN client IP addresses and subnets". Save and Update Running Server.

See if that "fixes" your issue.

I've had many different issues arise in my site-to-site connection journey, and that little hidden option tends to always make things start working. I would prefer to not use that option in my specific setup, but I'm currently unable to do so. I've been looking into the issue for a while now, but haven't made much headway.