itsupport5589
Hello,
I have installed Openvpn Server on Ubuntu 14 in my LAN and I have configure Openvpn Client on DD WRT Router at remote site, same client connected to Openvpn server and can able to access Server side host successfully ( ERP or Mail).
Now Im not able to ping from Server LAN Network or Openvpn Server to remote Host.
My Server Config
port 4096
proto udp
mode server
tls-server
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 172.30.30.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
push "route 192.168.0.0 255.255.255.0"
route 174.30.30.0 255.255.255.0 172.30.30.3
#push "dhcp-option DNS 8.8.8.8"
#push "dhcp-option DNS 8.8.4.4"
#push "redirect-gateway def1"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
#crl-verify crl.pem
Clinet config
client
dev tun
proto udp
remote xx.xx.xxx.xx 4096
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
comp-lzo
key-direction 1
verb 3
Current Routing & Firewall on Server
netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 ens33
172.20.20.0 172.30.30.3 255.255.255.0 UG 0 0 0 tun0
172.30.30.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 ens33
Current Routing & Firewall INFO on Client DD WRT
route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.20.1 0.0.0.0 UG 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 br0
172.20.20.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
172.30.30.0 0.0.0.0 255.255.255.0 U 0 0 0 tun1
192.168.0.0 172.30.30.1 255.255.255.0 UG 0 0 0 tun1
192.168.20.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
I tried to enable NAT & DIsable NAT at DD WRT, still the Server Side cannot access any remote host even from VPN Server.
Appreciate for your time and if any solution available, if i can access remote lan host from openvpn server end.
-Thanks,
Sam
TinCanTech
itsupport5589
Thanks I tried to add
iroute 172.20.20.0 255.255.255.0 on server.conf and restarted, still im not able ping the client subnet PCs or devices from Server Side.
Any specific configuration i need to make on server.conf or ddwrt openvpn page?
itsupport5589
Anybody can help, Everything is working except, the Server Side, cannot ping to openvpn client configured on DD WRT Route & Its LAN host ?
TinCanTech
The --iroute must go into a CCD file only. (As per the link above)
Then you have to setup routing on the client side network.
itsupport5589
ok, like i said, i have no problem accessing client to vpn server network host, I wanted ping from server to client network host.
TinCanTech
The server config you have posted will not have access to client networks.
itsupport5589
Ok, So can i have the correct server config to access client network.
