Sorry if this is an oft repeated topic but I just can't seem to get this working ...
I am trying to set up OpenVPN so that I can access machines inside an Azure subnet from my PC which is outside Azure.
I have successfully installed OpenVPN on both server (Windows Server 2019) and pc (Windows 10) using the instructions here:
https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide?__cf_chl_jschl_tk__=pmd_889e3e419b8b865ffd4da6e493bef6df0782273e-1629275604-0-gqNtZGzNAfijcnBszQgi, and I can successfully connect from client to server, however, I cannot connect to any other machine on the Azure subnet upon which the server is sitting.
The server and the other machines I want to connect to are on a 10.0.0.0 subnet, and the VPN is coming up on the 10.8.0.0 subnet as I would expect from the instructions in the link.
There is for example a host on 10.0.0.7 - I can log in to the windows server and ping it, but if I try from the VPN client, it fails.
A tracert on the server to 10.8.0.2 correctly comes back with the hostname of my PC.
A tracert from the client to 10.0.0.7 gets as far as the server (on 10.0.8.1) but does not get beyond that.
I have tried the following:
I have enabled IP routing on the server as recommended in the OpenVPN FAQ.
I have also added a 'push "route 10.0.0.0 255.255.255.0"' line to the server config, and I can see from the client log (and the client routing table) that this has been executed.
I was looking into using Tap instead of Tun, but when I dug into at what was actually being used, it looks as if as if both ends are using the Tap adaptor anyway, even though I had specified 'dev tun' in both the client and the server configs. I have now changed this to 'dev tap' at both ends.
I have set the server firewall to ignore the Tap adaptor.
I have also enabled NAT on the server as recommended in this article
https://community.openvpn.net/openvpn/wiki/NatHack.
But I am still not getting from the client to other nodes on the server network.
Help! What am I missing ?
