dentalan
Server is: VPN_10.8.1.0 /LAN_192.168.20.36
Clients LANs are:10.10.11.0,192.168.1.0,192.168.10.0,
Config file:
port 1194
proto udp
dev tun
dev-node TAP-Win32
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.1.0 255.255.255.0
ifconfig-pool-persist ipp.txt
management localhost 23
route 10.10.11.0 255.255.255.0
route 192.168.10.0 255.255.255.0
route 192.168.1.0 255.255.255.0
client-config-dir ccd
client-to-client
push "route 192.168.20.0 255.255.255.0"
push "route 10.10.11.0 255.255.255.0"
push "route 192.168.10.0 255.255.255.0"
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6
--Static routes on router
Destination IP Address Subnet Mask Gateway Status
10.8.1.0 255.255.255.0 92.168.20.36 Enable
192.168.1.0 255.255.255.0 192.168.20.36 Enable
10.10.11.0 255.255.255.0 192.168.20.36 Enable
192.168.10.0 255.255.255.0 192.168.20.36 Enable
The VPN seems to work ok. Client connect to VPN
Client LAN's PCs can see each other. For example the PC on client 10.10.11.12 can see the PC on client 192.168.10.111
The server PC can see any client on any LAN
The PCs behind the server cannot see any PC in any client LAN and are not visible from them
When I use tracert on server side PC it bounces between the server and the router:
(254 is the router on server side and 36 is the server's IP
Tracing route to 10.10.11.1 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 192.168.20.254
2 * <1 ms * LBase [192.168.20.36]
3 1 ms <1 ms <1 ms 192.168.20.254
4 * * * Request timed out.
5 1 ms 1 ms 1 ms 192.168.20.254
6 * * * Request timed out.
7 2 ms 1 ms 1 ms ^C
Static routing is correct and IP forwarding is enabled
How can I make the rerver sides devices communicate withe client LANs?
Thank you
