hi,
after getting
massive lagspikes I started my configuration over again. Now it looks like this:
Site A:
Windows Server 2016
OpenVPN-Server
LAN 192.168.10.220
TUN-Adapter 192.168.255.1
mode server
tls-server
dev tun
port 1194
proto udp
server 192.168.255.0 255.255.255.248
ip-win32 ipapi
ifconfig 192.168.255.1 192.168.255.2
ifconfig-pool-persist ipp.txt
client-to-client
comp-lzo
verb 3
keepalive 10 60
persist-key
persist-tun
status openvpn-status.log
cipher AES-256-CBC
ca ca.crt
cert Server.crt
key Server.key
dh dh4096.pem
push "route 192.168.10.0 255.255.255.0"
route 192.168.11.0 255.255.255.0 192.168.255.6
Site B:
Windows Server 2016
OpenVPN-Client
LAN 192.168.11.220
TUN-Adapter 192.168.255.6 (autoconfigured)
client
dev tun
proto udp
port 1194
remote site-a.example.com
persist-key
persist-tun
comp-lzo
verb 3
ca ca.crt
cert ServerB.crt
key ServerB.key
remote-cert-tls server
ip-win32 ipapi
Ping works from:
(A) 192.168.255.1 -> (B) 192.168.255.6
(B) 192.168.255.6 -> (A) 192.168.255.1
(B) 192.168.11.220 -> (A) 192.168.10.220
but not back from:
(A) 192.168.10.220 -> (B) 192.168.11.220
as well as not from:
(B) 192.168.11.220 -> (A)192.168.10.anything-but-220
(A) 192.168.10.220 -> (B)192.168.11.*
So i guess I made a mistake with my routing. "route print" on A prints (amongst other routes):
192.168.11.0(target) 255.255.255.0(netmask) 192.168.255.6(gateway) 192.168.10.220(interface) 26(metric)
I don't get, why it's not working then. Am I missing something?
The previously occuring lagspikes are gone though.
cheers
