snorhyvel Hi, I can't connect between my two networks, I can ping tunnel interface from server 1 to 2(10.*), but not vice versa. and I can't ping any LAN adresses (192.*) any ideas? server1 (client) Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.2 192.168.1.5 20 10.0.1.0 255.255.255.0 10.0.1.5 10.0.1.6 1 10.0.1.4 255.255.255.252 10.0.1.6 10.0.1.6 30 10.0.1.6 255.255.255.255 127.0.0.1 127.0.0.1 30 10.255.255.255 255.255.255.255 10.0.1.6 10.0.1.6 30 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.0.0 255.255.255.0 10.0.1.6 10.0.1.6 1 192.168.1.0 255.255.255.0 192.168.1.5 192.168.1.5 20 192.168.1.5 255.255.255.255 127.0.0.1 127.0.0.1 20 192.168.1.255 255.255.255.255 192.168.1.5 192.168.1.5 20 224.0.0.0 240.0.0.0 10.0.1.6 10.0.1.6 30 224.0.0.0 240.0.0.0 192.168.1.5 192.168.1.5 20 255.255.255.255 255.255.255.255 10.0.1.6 10.0.1.6 1 255.255.255.255 255.255.255.255 192.168.1.5 192.168.1.5 1 Default Gateway: 192.168.1.2 openVPN.ovpn: client proto udp dev tun ca ca.crt dh dh1024.pem cert **.crt key **.key remote **.dyndns.org 1194 cipher DES-EDE-CBC verb 2 mute 20 keepalive 10 120 comp-lzo persist-key persist-tun float resolv-retry infinite nobind push route 192.168.0.0 255.255.255.0 openvpn.conf on server2(server): port 1194 proto udp dev tun0 ca keys/**/ca.crt cert keys/**/**_server.crt key keys/**/**_server.key dh keys/trabiten/dh1024.pem server 10.0.1.0 255.255.255.0 crl-verify keys/**/crl.pem cipher DES-EDE-CBC user nobody group nogroup status servers/**/logs/openvpn-status.log log-append servers/**/logs/openvpn.log verb 2 mute 20 max-clients 100 keepalive 10 120 client-config-dir /etc/openvpn/servers/**/ccd client-to-client duplicate-cn comp-lzo persist-key persist-tun ccd-exclusive route 192.168.1.0 255.255.255.0
krzee snorhyvel wrote I can ping tunnel interface from server 1 to 2(10.*), but not vice versa. it is a firewall / packet filter on one of the machines
snorhyvel there's no firewall or packet filter on any machine... a strange thing is that today I could ping the local tunnel interface, and also what I believe is the tunnel interface on the remote machine (server) but not any of the LAN ip:s... as far as I can see the static routes is ok, but it wont work 🙁 the server is running Ubuntu and the client win2003 server any more idéas anyone?
krzee a) a client can not push an option to a server b) what is your goal? c) read this: https://www.secure-computing.net/wiki/index.php/OpenVPN/Routing
