Page 1 of 1
Cannot ping from client to server's lan dynamic IP addresses
Posted: Thu Jan 13, 2011 1:59 am
by itwip
Hello everyone, I am having problem when I tried to ping from the client to any dynamic IP addresses (assign by DHCP) in the server's subnet. However, fixed IP addresses in the server's lan can be pinged. I've used wireshark to capture the packets in one of the pc resides in the same server subnet, and I can see the ping request has reached the machine but its not replying to it. I suspect its something to do with my configuration file or route setup in the server lan gateway.
PS: I basically follow what the simple example (point to point) in the openvpn website.
Hopefully someone could give me a guideline. Thank you.
Re: Cannot ping from client to server's lan dynamic IP addre
Posted: Thu Jan 13, 2011 7:45 am
by krzee
does adding a route to the lan machine for it to access the vpn subnet using the lan ip of local vpn node as the gateway help?
Re: Cannot ping from client to server's lan dynamic IP addre
Posted: Thu Jan 13, 2011 7:55 am
by itwip
my router is a dlink DSL-504T, I am not 100% sure how to do a proper static routing in this router though. They have a `Routing` in its web interface which allows you to put a destination (remote IP) and subnet mask, and the Gateway address. What i did is I put destination ip = client's vpn ip address, subnet mask = 255.255.255.0 and gateway = openvpn server lan ip address (not vpn ip). Is it correct? I am not sure about the subnet mask though, the mask provided by DHCP in the server subnet is 255.255.0.0 instead of 255.255.255.0.
Re: Cannot ping from client to server's lan dynamic IP addre
Posted: Thu Jan 13, 2011 8:56 am
by krzee
target is the vpn network (10.8.0.0 for example)
subnet is the vpn subnet, so 255.255.255.0 if your vpn is 10.8.0.X
gateway you have correct
also, the client must have this in his config (assuming server lan of 10.0.X.X)
Re: Cannot ping from client to server's lan dynamic IP addre
Posted: Thu Jan 13, 2011 9:21 am
by itwip
does the subnet mask has to be the same between the server lan and vpn subnet?
Re: Cannot ping from client to server's lan dynamic IP addre
Posted: Thu Jan 13, 2011 9:29 am
by krzee
no, they are different networks... you just need to get each one right in the right places
