I have had a site-to-site vpn working for awhile now, and after updating the machines (both client and server are on Centos7) I can not access home from the office, but can still access all the office computers, very strange.
For example, I can connect to any server in the office, but I can not connect back from a server at the office to a home server.
Here is my server config:
port XXXX
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.9.1.0 255.255.255.0"
client-config-dir ccd
route 10.2.1.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.4.4 8.8.8.8"
client-to-client
keepalive 10 120
; comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 4
and my client (Home)
client
dev tun
proto udp
remote office.server.address XXXX
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
log-append /var/log/openvpn.log
verb 4
user nobody
group nobody
daemon
persist-tun
persist-key
Please help explain/fix why I can connect from 10.2 subnet machines into 10.9 machines, but I can not connect back from 10.9 to 10.2
static routes are set on each machine;
i.e. machines in 10.2 have a route for 10.9.1.0/24 via 10.2.1.203,
and 10.9 have a route for 10.2.1.0/24 via 10.9.1.22
servers have ip4 forwarding on/set etc!
As i said, it was working, then I updated the two machine which downloaded an updated openvpn (v2.3.14) and now it only works oneway 🙁
OpenVPN 2.3.14 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec 7 2016
library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
I've also checked firewall setting and disabled firewalls on the home machines; still doesn't work!
Thank you for helping!
