Hi evrybody.
I have a Windows-based openVPN-client and openVPN-server at linux
The connection looks like this:
Windows host(10.0.0.111)_____________________Linux server(10.0.0.1, 192.168.10.250,192.168.100.250)________host (192.168.100.1)
VPN client on Windows host(10.0.1.2)-----------------VPN server at linux server(10.0.1.1, 172.16.1.1)
Windows-client successfully connects to a linux-server. Client has a virtual IP 10.0.1.2, server - virtual IPs10.0.1.1 and 172.16.1.1 (see config below).
The server has three physical network adapters: 10.0.0.1, 192.168.100.250, 192.168.10.250
Behind the linux server there is a host with IP 192.168.100.1
After successfull VPN-connection I can ping (from client side) interfaces 172.16.1.1 and 192.168.100.1 but not 192.168.100.250 and 192.168.10.250
Without VPN-connection I cannot ping any of these interfaces
Show me the moments where I do mistakes please. It is nesessary for me to get access to interfaces 192.168.100.250 and 192.168.10.250 because there are some daemons bound to its
proper rules (INPUT, OUTPUT, FORWARD, POSTROUTING) for iptables on a linux server are present
mode server
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh2048.pem
topology net30
push "topology net30"
server 172.16.1.0 255.255.255.0
push "route 192.168.100.0 255.255.255.0"
push "route 192.168.10.0 255.255.255.0"
client-config-dir clients
route 10.0.1.0 255.255.255.0
push "dhcp-option DNS 10.0.0.1"
push "dhcp-option NTP 10.0.0.1"
user nobody
group nobody
ifconfig-push 10.0.1.2 10.0.1.1
Routing table of the server:
default via 192.168.100.1 dev enp3s0
default via 192.168.100.1 dev enp3s0 proto static metric 1024
10.0.0.0/24 dev enp2s0 proto kernel scope link src 10.0.0.1
10.0.0.0/24 via 10.0.0.1 dev enp2s0 proto static metric 1
10.0.1.0/24 via 172.16.1.2 dev tun0
172.16.1.0/24 via 172.16.1.2 dev tun0
172.16.1.2 dev tun0 proto kernel scope link src 172.16.1.1
192.168.10.0/24 dev enp4s0 proto kernel scope link src 192.168.10.250
192.168.100.0/24 dev enp3s0 proto kernel scope link src 192.168.100.250
