Access OpenVPN client from backend LAN servers

[Milfzilla]

Hi Everyone.

I've this kind of architecture.



For the moment, the two OpenVPN client communicate well with backend servers on Azure (Black arrows).

With this configuration on OpenVPN server :

- In /etc/sysctl.conf : net.ipv4.ip_forward=1

- In /etc/openvpn/server.conf : push "route 10.0.0.0 255.255.255.0"

- This iptables rule : iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE



Now I would like to communicate from the two backend servers (Azure VM 1 & 2) to OpenVPN client (Red arrows), for exemple ssh from Azure VM1 to OpenVPN Clients or http request from Azure VM1 to OpenVPN Client (server 2 contain a http server).

All servers are Linux.

For the moment I didn't find how to do that.

Thanks for your help

[Milfzilla]

Can someone help me on this,
I think it's a kind of iroute to add to server config, but I don't know what exactly because there isn't LAN subnet behind OpenVPN clients because these are only public hosts.
Something that is strange is that OpenVPN server can already ping or ssh to OpenVPN client, but Azure VM 1 & Azure VM 2 can't...