Hello,
I have 2 vpn community servers that need to talk with each other, in particular server1 is a client of server2 and both use tap devices, from server1 I can ping the clients of server2 but the clients of server1 can't ping server2 nor its clients, both servers have IP-Forwarding enabled.
Currently I've tried
expanding-the-scope-of-the-vpn-to-include-additional-machines...
With the following configurations
port 1194
proto udp
dev tap
persist-key
persist-tun
user nobody
group nogroup
verb 3 # verbose mode
ca /etc/openvpn/server/easy-rsa/pki/ca.crt
cert /etc/openvpn/server/easy-rsa/pki/issued/server1.crt
key /etc/openvpn/server/easy-rsa/pki/private/server1.key
dh /etc/openvpn/server/easy-rsa/dh.pem
tls-auth /etc/openvpn/server/easy-rsa/ta.key 0
crl-verify /etc/openvpn/server/easy-rsa/pki/crl.pem
keepalive 10 120
comp-lzo
client-to-client
client-config-dir /etc/openvpn/server/ccd
server 10.1.0.0 255.255.255.0
push "route 10.2.0.0 255.255.255.0"
port 1194
proto udp
dev tap
persist-key
persist-tun
user nobody
group nogroup
verb 3 # verbose mode
ca /etc/openvpn/server/easy-rsa/pki/ca.crt
cert /etc/openvpn/server/easy-rsa/pki/issued/server2.crt
key /etc/openvpn/server/easy-rsa/pki/private/server2.key
dh /etc/openvpn/server/easy-rsa/dh.pem
tls-auth /etc/openvpn/server/easy-rsa/ta.key 0
crl-verify /etc/openvpn/server/easy-rsa/pki/crl.pem
keepalive 10 120
comp-lzo
client-to-client
client-config-dir /etc/openvpn/server/ccd
server 10.2.0.0 255.255.255.0
client
proto udp
dev tap
remote server2.mywebsite.net 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ./server2/ca.crt
cert ./server2/server1.crt
key ./server2/server1.key
tls-auth ./server2/ta.key 1
verb 3
comp-lzo
remote-cert-tls server
I've also tried it backwards having server2 being a client of server1 to no avail.
