Site to Site problems.

[tehbublitz]

Ok Computers from both networks can ping each other.

The client and server can ping each other but not other devices...They respond to pings if they are the destination NOT the source.

So whats happening is when you ping from the client or server the source packet is the tunnel interface, not the LAN interface. So other devices on each network does not know about the tunnel interface network just their own and the other end of the VPN.

I could just add a route on both ends, but the server will have 2 tunnels and host cluster witness file shares. This is a hosted machine so I don't want to buy 1 machine for just OpenVpn and another to host file shares.

So I need the server to source packets with its LAN address not its tunnel address even if its going to the remote network.

Is such a thing possible?

[Mimiko]

Is such a thing possible?

Yes, using iptables and masquerading.

[flatlining.theory]

Hi. I did not know that this is possible. Thank you for sharing the information. =)

[healthydiets]

Thanks a lot. It was helpful for me too.

[Mimiko]

but how??

See method 4 from topic9465.html

[fanbi]

Is such a thing possible?

Yes, using iptables and masquerading.

Yes but generally the masquerading isn't very efficient. Unless you know of a better way to do it than I do...

[Mimiko]

Unless you know of a better way to do it than I do...

Using netmask option of iptables.

[Dwayne]

Recheck all the software...may be hardware connecting software....... or there can be virus problem into the system....