Cannot ping (PC openvpn client<-> openVpn Server <-> Router openvpn client)

etantonio

Hi, ùI've this problem from a long time,
I've a local network, 172.18.0.0 that is behind an openvpn client implemented on router Maestro/Lantronix E225,
the openVPN Server is on Ubuntu 18. The openVPN server produced the key for my lapp and for E225 router,
the router can always ping E225 through the openvpn channel, so it is possible to ping 172.18.0.1 from the router,
but for the router is not possible to ping my laptop ip 192.168.1.155 also if my ip is connected

OpenVPN CLIENT LIST
Updated,Wed Aug 12 22:27:54 2020
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
client_PcSolergyEtantonio__xxx.153:29432,54480,42749,Wed Aug 12 22:24:09 2020
client_MaestroEnelCtPassoMartino__xxx.5:35032,11296,12344,Wed Aug 12 22:23:17 2020
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.98,client_MaestroEnelCtPassoMartino__xxx.5:35032,Wed Aug 12 22:27:04 2020
192.168.1.0/24,client_PcSolergyEtantonio__xxx.153:29432,Wed Aug 12 22:24:09 2020
10.8.0.94,client_PcSolergyEtantonio__xxx.153:29432,Wed Aug 12 22:27:36 2020
172.18.0.0/16,client_MaestroEnelCtPassoMartino__xxx.5:35032,Wed Aug 12 22:23:20 2020
GLOBAL STATS
Max bcast/mcast queue length,3
END

my final scope is to ping E225 router from my PC through the vpn,
where's my error?
Antonio

TinCanTech

https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p93575

etantonio

in CCD Folder I've 2 file:

client_PcSolergyEtantonio__xxx containing iroute 192.168.1.0 255.255.255.0
client_MaestroEnelCtPassoMartino__212_237_33_65 containing iroute 172.18.0.0 255.255.0.0

this is the server config

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist /var/log/openvpn/ipp.txt
push "route 172.18.0.0 255.255.0.0"
push "route 192.168.1.0 255.255.255.0"
client-config-dir ccd
route 172.18.0.0 255.255.0.0
route 192.168.1.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
auth SHA512
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 4
explicit-exit-notify 1
management localhost 7505

this is the pc client configuration running on Windows10

client
dev tun
proto udp
remote xxxxxxxxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
auth SHA512
comp-lzo
verb 3
<ca>
-----BEGIN CERTIFICATE----
xxxx
-----END CERTIFICATE-----
</ca>
<cert>
xxx
</cert>
<key>
xxx
</key>
<tls-auth>
xxx
</tls-auth>

when I try to ping from the PC to the E225 router 172.18.0.1 through the openvpn server I've this message on the server log

Thu Aug 13 07:01:46 2020 us=839927 MULTI: Learn: 172.18.0.1 -> client_MaestroEnelCtPassoMartino__xxxx/yyyy:39028

and also

Thu Aug 13 07:42:15 2020 us=496864 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_VER=2.4.9
Thu Aug 13 07:42:15 2020 us=497015 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_PLAT=win
Thu Aug 13 07:42:15 2020 us=497155 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_PROTO=2
Thu Aug 13 07:42:15 2020 us=497273 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_LZ4=1
Thu Aug 13 07:42:15 2020 us=497390 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_LZ4v2=1
Thu Aug 13 07:42:15 2020 us=497504 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_LZO=1
Thu Aug 13 07:42:15 2020 us=497618 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_COMP_STUB=1
Thu Aug 13 07:42:15 2020 us=497736 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_COMP_STUBv2=1
Thu Aug 13 07:42:15 2020 us=497886 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_TCPNL=1
Thu Aug 13 07:42:15 2020 us=497982 client_PcSolergyEtantonio__xxx.153:28759 peer info: IV_GUI_VER=OpenVPN_GUI_11
Thu Aug 13 07:42:15 2020 us=498246 client_PcSolergyEtantonio__xxx.153:28759 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Aug 13 07:42:15 2020 us=498366 client_PcSolergyEtantonio__xxx.153:28759 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Aug 13 07:42:15 2020 us=524749 client_PcSolergyEtantonio__xxx.153:28759 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA

TinCanTech

If openvpn has been configured to route those networks then that is what it will do.

You have probably forgotten to provision the routing correctly on the local/remote network.

etantonio

TinCanTech wrote You have probably forgotten to provision the routing correctly on the local/remote network.

I can't understand where's my mistake, what else is to be provided?
The server can see both the "E225 Router Client" and the "Windows10 PC client".
How can I check where's the problem. Thanks for your help