OpenVPN Problems connecting to other devices

th

Hello everyone, I need some help setting up my OpenVPN so that my client can connect to other devices on the local network.
I read alot of posts and tutorials but I cannot get this to work 🙁

What works is I can already connect to the server, and even ping the server via its local IP (192...) but not any other device.
My current setup is as follows :
Target Network:
Router IP: 192.168.101.1
DNS Server IP: 192.168.101.2
OpenVPN Server IP: 192.168.101.4
DHCP is turned off on the router and all devices have static ips.
IP Forwarding is enabled on the server, the ports are correctly forwarded and the firewall is set to allow all traffic via the given port.

Here is my Server config:

local 192.168.101.4
port 1194
topology subnet
proto udp
dev tun

dh "C:\\Program Files\\OpenVPN\\server-keys\\dh.pem"
ca "C:\\Program Files\\OpenVPN\\server-keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\server-keys\\WINSRV2.crt"
key "C:\\Program Files\\OpenVPN\\server-keys\\WINSRV2.key"
tls-auth "C:\\Program Files\\OpenVPN\\server-keys\\ta.key" 0

server 10.19.15.0 255.255.255.0
ifconfig-pool-persist "C:\\Program Files\\OpenVPN\\ipp.txt"
client-to-client

client-config-dir "C:\\Program Files\\OpenVPN\\ccd"
push "route 192.168.101.0 255.255.255.0 192.168.101.4"
push "dhcp-option DNS 192.168.101.2"

keepalive 10 120
compress lz4
persist-key
persist-tun

status "C:\\Program Files\\OpenVPN\\log\\openvpn-status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
log-append "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
verb 3

And here is one client config:

client
dev tun

proto udp
remote SERVER_IP 1194
resolv-retry infinite
nobind
persist-key
persist-tun

ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1

compress lz4
verb 3

Can anyone help me out 🙂?

th

Ah sorry, wrong sub... Can anyone please move this to Configuration? Sorry 🙁

TinCanTech

th wrote I read alot of posts and tutorials

Please start with the howto:
https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet.

th

TinCanTech wrote
th wrote I read alot of posts and tutorials
Please start with the howto:
https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet.

I have tried that to no avail, that is why I removed it again from the config

300000

you need doing NAT and ip forward on openvpn server so when client connect to it ip virual ip can routing to real ip , you install on windows system so just going to example they have some to read and just make the last bit it will do the job for you . at the moment you only can ping 10.19.15.1 that is server address and that is on virtual ip so think how to route from that virual ip to real ip 192.168.101.0 on routing .that why you need NAT and forward to make it work.

https://forums.openvpn.net/viewtopic.php?f=7&t=7806

TinCanTech

th wrote
TinCanTech wrote
th wrote I read alot of posts and tutorials
Please start with the howto:
https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet.
I have tried that to no avail, that is why I removed it again from the config

Then you did it incorrectly.

th

TinCanTech wrote
th wrote
TinCanTech wrote Please start with the howto:
https://community.openvpn.net/openvpn/wiki/HOWTO#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet.
I have tried that to no avail, that is why I removed it again from the config
Then you did it incorrectly.

Probably, otherwise it would have worked

TinCanTech

th wrote
TinCanTech wrote
th wrote

I have tried that to no avail, that is why I removed it again from the config
Then you did it incorrectly.
Probably, otherwise it would have worked

So now you intend to make it work some other way ?

th

TinCanTech wrote
th wrote
TinCanTech wrote

Then you did it incorrectly.
Probably, otherwise it would have worked
So now you intend to make it work some other way ?

No, I intend to make it work in any way.
Also, adding each clients subnet to that list can't be a solution, that had to be manually updated every time a client switches to a different network?