Hi to all!
I'm new with OpenVPN Server so I have a problem with configuration.
This is my network scheme:
OpenVPN Server works in bridge mode.
I want that clients has access to networks 172.17.18.0, 172.17.19.0 and so on and I nedd that all trafiŃ goes throught Cisco 2921 that has gateways 172.17.18.254, 172.17.19.254, 10.10.10.254, etc.
Now my OpenVPN server works, Cisco 2921 view Client IP addresses, but client can't ping anything: 10.10.10.254, 172.17.17.254, 172,17,18.254
Can somebody explain what I miss?
Thank you!
mode server
port 443
proto tcp
dev tap0
user openvpn
group openvpn
dh /etc/openvpn/keys/dh.pem
ca /etc/openvpn/keys/CA.crt
cert /etc/openvpn/keys/VFA-VPNO-0001-V.cer
key /etc/openvpn/keys/VFA-VPNO-0001-V.key
crl-verify /etc/openvpn/keys/certcrl.crl
tls-auth /etc/openvpn/keys/ta.key 0
script-security 2
cipher AES-256-CBC
mute 10
persist-key
persist-tun
keepalive 10 900
client-config-dir /etc/openvpn/ccd
server-bridge 10.10.10.1 255.255.255.0 10.10.10.10 10.10.10.250
route 10.10.10.0 255.255.255.0 10.10.10.1
route 172.17.17.0 255.255.255.0 10.10.10.1
route 172.17.18.0 255.255.255.0 10.10.10.1
route 172.17.19.0 255.255.255.0 10.10.10.1
route-gateway 10.10.10.1
route-method exe
topology subnet
client-to-client
status /var/log/openvpn/openvpn-status.log
log-append /var/log/openvpn/openvpn-server.log
verb 4
tun-mtu 1200
mssfix 1450
plugin /usr/lib/openvpn/openvpn-auth-ldap.so /etc/openvpn/ldap.conf
username-as-common-name
ifconfig-push 10.10.10.15 255.255.255.0
push "route 10.10.10.0 255.255.255.0 10.10.10.1 1"
push "route 172.17.17.0 255.255.255.0 10.10.10.1 1"
push "route 172.17.18.0 255.255.255.0 10.10.10.1 1"
push "route 172.17.19.0 255.255.255.0 10.10.10.1 1"
