How to config server to accept more than one client

[SnipeHunter]

I have an exisiting openvpn/shorewall server running on uclibc 4. I have two clients connected currently with no issues. Each client currently connects to a different instance of the openvpnserver (mainly because I couldn't get one server to listen on two physical nics- server is a linux router with four nics).

I want to bring three more clients online so those remote sites can access resources at the server site, and I can connect to resources at the remote sites. With the existing config I use shorewall to control the traffic flow.

I believe the the new client (uclibc with three nics) connects ok, but traffic isn't getting routed out the tunnel according to the shorewall logs. The traffic (failed ping attempts) is not detected at all. I can ping, rdp and samba both ways between x.x.120.x and x.x.225.x, but can't get traffic to flow between x.x.221.x or x.x.227.x.

Server.conf:

Code: Select all

local ServerPublic.IP.Address.Here
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/serverkey.crt
key /etc/openvpn/keys/serverkey.key  # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server 10.7.0.0 255.255.255.0
ifconfig-pool-persist /var/lib/openvpn-ipp.txt
push "route 192.168.120.0 255.255.255.0"
push "route 192.168.119.0 255.255.255.0"
client-config-dir ccd
route 192.168.225.0 255.255.255.0
route 192.168.221.0 255.255.255.0
route 192.168.227.0 255.255.255.0
client-to-client
keepalive 10 120
comp-lzo
max-clients 4
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status-public.log
log-append /var/log/openvpn.log
verb 6

Client Conf @ x.x.227.x location

Code: Select all

client
dev tun
proto udp
remote ServerPublic.IP.Address.Here 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/clientthree.crt
key /etc/openvpn/keys/clientthree.key
ns-cert-type server
comp-lzo
verb 3

I'm (obviously) still green on this. A shove in the right direction is greatly appreciated. I've spent 12 hours already with no success.