lan2lan - cant ping client on the server side network

s7evingra

Hi, I created a Lan to lan vpn by following this guide https://openvpn.net/vpn-server-resources/site-to-site-routing-explained-in-detail/.

openVpn Client on Linux-> Router Openvpn Client Side -> Router Openvpn server side -> OpenVpn Server on linux

Now, from the client on which the openvpn client is installed I can reach any client in the server side, BUT from a client on the openVpn Clinet sitd I cant reach a client on the openVpn Server side.

This is a traceroute on the OpenVpn Client machine pinging a client on the server side network:

root@circo:/home/manutenzione# traceroute 192.168.1.1
traceroute to 192.168.1.1 (192.168.1.1), 64 hops max
  1   172.27.232.1  27.887ms  27.472ms  27.482ms 
  2   192.168.1.1  28.182ms  27.929ms  27.481ms 
root@circo:/home/manutenzione#

This is a traceroute on another pc in the Client Side network to a client on the server side network:

C:\Users\operatore>tracert 192.168.1.1

  1    <1 ms    <1 ms    <1 ms  ARCHER_VR400 [192.168.10.254] //This is the router gateway on the client network
  2    <1 ms    <1 ms    <1 ms  192.168.10.18 //This is the ip of openvpn Client
  3     *        *        *     Richiesta scaduta.
  4     *        *        *     Richiesta scaduta.
  5  ^C

The server side network is 192.168.1.0/24
The client side network is 192.168.10.0/24
The openvpn server have ip: 192.168.1.18
The openvpn client have ip: 192.168.10.18
The openvpn network have ip: 172.27.224.0/20

Any solution?

Pippin

On the client side router add a route:
Destination - Netmask - Gateway
VPNsubnet VPNnetmask VPNserverIP
172.27.224.0 - 255.255.240.0 - 192.168.1.18
OR
Add the route on every client side host.
AND
On the VPN client -> ip_forward=1

s7evingra

HI, thanks for your reply.
On the client side router I created the following static routes:

ID Destinazione rete Subnet Mask Gateway
1 192.168.1.0 255.255.255.0 192.168.10.18
2 172.27.224.0 255.255.255.240 192.168.10.18

and the ip_forward=1.

In the client traceroute I have:

C:\Users\operatore>tracert 192.168.1.1

  1    <1 ms    <1 ms    <1 ms  ARCHER_VR400 [192.168.10.254] //This is the router gateway on the client network
  2    <1 ms    <1 ms    <1 ms  192.168.10.18 //This is the ip of openvpn Client
  3     *        *        *     Richiesta scaduta.
  4     *        *        *     Richiesta scaduta.
  5  ^C

means that the static route works fine, but I cant reach the 192.168.1.1

Pippin

/20 = 255.255.240.0
NOT
/28 = 255.255.255.240

The openvpn network have ip: 172.27.224.0/20

Also see:
https://forums.openvpn.net/viewtopic.php?t=22603

s7evingra

Hi, I fixed the static route but the problem remains.