I made sure there was no firewall on the remote machine.
From a computer on my ovpn server's subnet I can ping my ovpn client or other computers on the client's subnet.
However, the reverse is not true: I cannot ping computer's on my server's LAN from the VPN client or the client subnet.
# grep -vE '^#|^;|^$' tun_server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh2048.pem
topology subnet
server 10.254.254.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.143.0.0 255.255.0.0"
client-config-dir ccd
route 10.0.0.0 255.255.255.0
client-to-client
push "route 10.0.0.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
When I tcpdump on tun0 I can see that the problem is with my vpn server, as the packets get that far:
# tcpdump -n -i tun0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 262144 bytes
05:31:02.642512 IP 10.254.254.2 > 10.143.0.2: ICMP echo request, id 3609, seq 611, length 40
05:31:02.642543 IP 10.143.0.2 > 10.254.254.2: ICMP echo reply, id 3609, seq 611, length 40
05:31:03.652384 IP 10.254.254.2 > 10.143.0.2: ICMP echo request, id 3609, seq 612, length 40
05:31:03.652405 IP 10.143.0.2 > 10.254.254.2: ICMP echo reply, id 3609, seq 612, length 40
05:31:04.677536 IP 10.254.254.2 > 10.143.0.2: ICMP echo request, id 3609, seq 613, length 40
05:31:04.677561 IP 10.143.0.2 > 10.254.254.2: ICMP echo reply, id 3609, seq 613, length 40
05:31:05.688719 IP 10.254.254.2 > 10.143.0.2: ICMP echo request, id 3609, seq 614, length 40
05:31:05.688741 IP 10.143.0.2 > 10.254.254.2: ICMP echo reply, id 3609, seq 614, length 40
(PINGS TO SERVER GET RETURNED)
05:31:13.189998 IP 10.254.254.2 > 10.143.0.3: ICMP echo request, id 57247, seq 615, length 40
05:31:18.044650 IP 10.254.254.2 > 10.143.0.3: ICMP echo request, id 57247, seq 616, length 40
05:31:23.087374 IP 10.254.254.2 > 10.143.0.3: ICMP echo request, id 57247, seq 617, length 40
05:31:28.042167 IP 10.254.254.2 > 10.143.0.3: ICMP echo request, id 57247, seq 618, length 40
^C
(PINGS TO OTHER COMPUTER ON SERVER LAN NEVER REACH ETH0 OF OTHER COMPUTER, INSTEAD APPEAR TO DIE HERE)
The server side is google cloud platform.
Any help is much appreciated.
