I have such a topology:
Clients can successfully connect to VPN, the tun interface is created, I can ping server from both clients.
The problem is when I try to ping 253,252 or 3 subnet. Then ping fails. However, packets reach VPN server. There is no firewall on VPN server.
Every client has its own config file in ccd directory on server side.
Example for client 1:
push "route 192.168.3.0 24"
ifconfig-push 10.0.0.18 10.0.0.1
When there is no VPN, server can ping 253, 252, 3 subnets. But when the VPN is connected, I can't ping.
My goal: I need to ping from client1, client2 to 253,252 and 3 subnets:
Here's the client configuration:
client
dev tun0
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
auth SHA256
persist-key
persist-tun
cipher AES-128-CBC
verb 4
keepalive 10 120
key-direction 1
tls-client
<ca>
...
</ca>
<cert>
...
</cert>
<key>
..
</key>
<tls-auth>
...
</tls-auth>
And server config:
tls-server
dev tun0
proto udp
port 1194
ca ca.crt
cert server.crt
key serverdecrypted.key
cipher AES-128-CBC
auth SHA256
verb 6
keepalive 10 120
persist-key
persist-tun
dh dh.pem
tls-auth ta.key 0
server 10.0.0.0 255.255.0.0
