[Solved] Client-to-client ping only in one direction

SuperManitu

Hello,
I wanted to set up a tunnel for LAN gaming but now only I (client1) can ping his machine (client2) not the other way round.
Here is my server config:

server 192.168.255.0 255.255.255.0
verb 3
key <path>
ca /etc/openvpn/pki/ca.crt
cert <path>
dh /etc/openvpn/pki/dh.pem
tls-auth /etc/openvpn/pki/ta.key
key-direction 0
keepalive 10 60
persist-key
persist-tun

client-to-client

proto udp
# Rely on Docker to do port mapping, internally always 1194
port 1194
dev tap0
status /tmp/openvpn-status.log

user nobody
group nogroup

### Route Configurations Below
route 192.168.254.0 255.255.255.0

### Push Configurations Below

push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# Does not change anything
;push "route 192.168.255.0 255.255.255.0 192.168.255.1 50"

### Extra Configurations Below
cipher AES-256-CBC

And my client config:

client
nobind
dev tun
remote-cert-tls server

remote XXXX.XXX.com 1195 udp
key-direction 1

redirect-gateway def1
cipher AES-256-CBC

As said connection works for both of us, but only I can ping him. My firewall should not eat pings as I can ping from my local LAN.
Note that I do not want to brige the two networks, I just want to create a new network for all the clients. TAP so all traffic is forwarded, not only IP.
Thanks in advance

SuperManitu

I solved it by adding

push "route 0.0.0.0 0.0.0.0 192.168.255.1 50"

to my server config. Somehow his windows didnt like all other options

TinCanTech

You should use --redirect-gateway not 0.0.0.0 because --redirect-gateway does not wipe out the real client gateway. Your problem is something else and what you have now is poor solution ..

If you really want to solve the problem post your complete logs @ verb 4

SuperManitu

As you see I have used redirect-gateway, and it did not work. Neither when in the client config nor via push in the server config.

TinCanTech

SuperManitu wrote I have used redirect-gateway, and it did not work

But you do not know Why ..