[conf] How to access LAN behind a openvpn server?

[tk2]

I have such a topology:



Clients can successfully connect to VPN, the tun interface is created, I can ping server from both clients.

The problem is when I try to ping 253,252 or 3 subnet. Then ping fails. However, packets reach VPN server. There is no firewall on VPN server.

Every client has its own config file in ccd directory on server side.
Example for client 1:

Code: Select all

push "route 192.168.3.0 24" 
ifconfig-push 10.0.0.18 10.0.0.1

When there is no VPN, server can ping 253, 252, 3 subnets. But when the VPN is connected, I can't ping.

My goal: I need to ping from client1, client2 to 253,252 and 3 subnets:

Here's the client configuration:

Code: Select all

client
dev tun0
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
auth SHA256
persist-key
persist-tun
cipher AES-128-CBC
verb 4
keepalive 10 120
key-direction 1
tls-client
<ca>
...
</ca>
<cert>
...
</cert>
<key>
..
</key>
<tls-auth>
...
</tls-auth>

And server config:

Code: Select all

tls-server
dev tun0
proto udp
port 1194
ca ca.crt
cert server.crt
key serverdecrypted.key
cipher AES-128-CBC
auth SHA256
verb 6
keepalive 10 120
persist-key 
persist-tun
dh dh.pem
tls-auth ta.key 0
server 10.0.0.0 255.255.0.0