Can't get access to the local network / resources

[kos-143]

Hello,

I'm trying to setup OpenVPN 2.4.4(I601) on Windows Server 2008 Service Pack 2 as a VPN server. My client is Windows Server 2012 R2.
Client and server successfully connect but I can ping only hosts in VPN network (192.168.11.X).

What should I change in the config file to allow networks to access each other?

Server local network: 192.168.21.X
VPN Network - 192.168.11.X
Client network: 10.0.0.X

Server Intranet IP: 192.168.21.8
Client Intranet IP: 10.0.0.7

Server VPN IP: 192.168.11.1
Client VPN IP: 192.168.11.6

Server config:

Code: Select all

port 1194
proto udp
dev tun
dev-node "VPN Server"
dh "C:\\Program\\OpenVPN\\ssl\\dh2048.pem"
ca "C:\\Program\\OpenVPN\\ssl\\ca.crt"
cert "C:\\Program\\OpenVPN\\ssl\\cert.crt"
key "C:\\Program\\OpenVPN\\ssl\\cert.key"
server 192.168.11.0 255.255.255.0
push "route 192.168.21.0 255.255.255.0"
push "route 192.168.11.0 255.255.255.0"
route 10.0.0.0 255.255.255.0 
max-clients 32
keepalive 10 120
comp-lzo
client-to-client
persist-key
persist-tun
cipher DES-CBC
status "C:\\Program\\OpenVPN\\log\\status.log"
log "C:\\Program\\OpenVPN\\log\\openvpn.log"
verb 4
mute 20

Client config:

Code: Select all

client
resolv-retry infinite
nobind
remote 97.XXX.XXX.XXX 1194
proto udp
dev tun
ca ca.crt
cert clients.crt
key clients.key
dh dh2048.pem
float
cipher DES-CBC
keepalive 10 120
persist-key
persist-tun
verb 0

Route print from server:

Code: Select all

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.21.1     192.168.21.8    276
         10.0.0.0    255.255.255.0         On-link      192.168.11.1     20
       10.0.0.255  255.255.255.255         On-link      192.168.11.1    276
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.11.0    255.255.255.0         On-link      192.168.11.1    276
     192.168.11.1  255.255.255.255         On-link      192.168.11.1    276
   192.168.11.255  255.255.255.255         On-link      192.168.11.1    276
     192.168.21.0    255.255.255.0         On-link      192.168.21.8    276
     192.168.21.8  255.255.255.255         On-link      192.168.21.8    276
   192.168.21.255  255.255.255.255         On-link      192.168.21.8    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.21.8    276
        224.0.0.0        240.0.0.0         On-link      192.168.11.1    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.21.8    276
  255.255.255.255  255.255.255.255         On-link      192.168.11.1    276
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
          0.0.0.0          0.0.0.0      192.168.0.1  Default
          0.0.0.0          0.0.0.0     192.168.21.1  Default
===========================================================================

Route print from client:

Code: Select all

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         10.0.0.1         10.0.0.7      5
         10.0.0.0    255.255.255.0         On-link          10.0.0.7    261
         10.0.0.7  255.255.255.255         On-link          10.0.0.7    261
       10.0.0.255  255.255.255.255         On-link          10.0.0.7    261
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
    168.63.129.16  255.255.255.255         10.0.0.1         10.0.0.7      6
  169.254.169.254  255.255.255.255         10.0.0.1         10.0.0.7      6
     192.168.11.0    255.255.255.0         On-link      192.168.11.2    276
     192.168.11.0    255.255.255.0     192.168.11.1     192.168.11.2     20
     192.168.11.2  255.255.255.255         On-link      192.168.11.2    276
   192.168.11.255  255.255.255.255         On-link      192.168.11.2    276
     192.168.21.0    255.255.255.0     192.168.11.1     192.168.11.2     20
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link          10.0.0.7    261
        224.0.0.0        240.0.0.0         On-link      192.168.11.2    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link          10.0.0.7    261
===========================================================================
Persistent Routes:
  None

Kind regards and Thank you!
KoS

[TinCanTech]

HOWTO: Expanding the scope of the VPN to include additional machines