Hey All, I've got two Open VPNs connecting to different servers in our infrastructure:
Client Pool <-> SRV1 <-> SRV2 <-> VPN Client
10.0.5.0/24 <-> 10.0.1.2 <-> 10.0.1.3 <-> 10.0.2.1
(SRV1 and SRV2 sit on a regular, non-vpn internal network)
And all our routes are set up correctly to have the client pool (10.0.5.0/24) connect to the VPN client on the other end (10.0.2.1), and I can watch the traffic, but packets never get routed down the TUN interfaces on either side when they originate from the other side of the VPN. I suspect, reading the docs that iroute is needed on SRV1 to indicate that clients on 10.0.5.0/24 can get to 10.0.2.0/24. Do I have to make a ccd file for each client with an iroute command in it, and is this the correct solution? Do I need an iroute command on SRV2 for VPN Client 10.0.2.1, even though it's basically a point to point server? (it's hosting clients from 10.0.2.0/24)