Hello everyone, I am having problem when I tried to ping from the client to any dynamic IP addresses (assign by DHCP) in the server's subnet. However, fixed IP addresses in the server's lan can be pinged. I've used wireshark to capture the packets in one of the pc resides in the same server subnet, and I can see the ping request has reached the machine but its not replying to it. I suspect its something to do with my configuration file or route setup in the server lan gateway.
PS: I basically follow what the simple example (point to point) in the openvpn website.
Hopefully someone could give me a guideline. Thank you.
Cannot ping from client to server's lan dynamic IP addresses
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
- OpenVpn Newbie
- Posts: 3
- Joined: Thu Jan 13, 2011 1:52 am
- krzee
- Forum Team
- Posts: 728
- Joined: Fri Aug 29, 2008 5:42 pm
Re: Cannot ping from client to server's lan dynamic IP addre
does adding a route to the lan machine for it to access the vpn subnet using the lan ip of local vpn node as the gateway help?
-
- OpenVpn Newbie
- Posts: 3
- Joined: Thu Jan 13, 2011 1:52 am
Re: Cannot ping from client to server's lan dynamic IP addre
my router is a dlink DSL-504T, I am not 100% sure how to do a proper static routing in this router though. They have a `Routing` in its web interface which allows you to put a destination (remote IP) and subnet mask, and the Gateway address. What i did is I put destination ip = client's vpn ip address, subnet mask = 255.255.255.0 and gateway = openvpn server lan ip address (not vpn ip). Is it correct? I am not sure about the subnet mask though, the mask provided by DHCP in the server subnet is 255.255.0.0 instead of 255.255.255.0.
- krzee
- Forum Team
- Posts: 728
- Joined: Fri Aug 29, 2008 5:42 pm
Re: Cannot ping from client to server's lan dynamic IP addre
target is the vpn network (10.8.0.0 for example)
subnet is the vpn subnet, so 255.255.255.0 if your vpn is 10.8.0.X
gateway you have correct
also, the client must have this in his config (assuming server lan of 10.0.X.X)
subnet is the vpn subnet, so 255.255.255.0 if your vpn is 10.8.0.X
gateway you have correct
also, the client must have this in his config (assuming server lan of 10.0.X.X)
Code: Select all
route 10.0.0.0 255.255.0.0
-
- OpenVpn Newbie
- Posts: 3
- Joined: Thu Jan 13, 2011 1:52 am
Re: Cannot ping from client to server's lan dynamic IP addre
does the subnet mask has to be the same between the server lan and vpn subnet?
- krzee
- Forum Team
- Posts: 728
- Joined: Fri Aug 29, 2008 5:42 pm
Re: Cannot ping from client to server's lan dynamic IP addre
no, they are different networks... you just need to get each one right in the right places