My network configuration is
- LAN: 192.168.16.1/24
- My PC: 192.168.16.105
- Server with OpenVPN: 192.168.16.106
- VPN LAN: 192.168.17.1/24
On router i already configured static ip route:
192.168.17.0/24 gw 192.168.16.106
OpenVPN Community installed on Windows Server 2019 Standart
My PC has Windows 11 Pro
My ovpn configuration:
- server.ovpn
server.ovpn
port 1194
proto udp4
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\issued\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\private\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\dh.pem"
local 192.168.16.106
topology subnet
server 192.168.17.0 255.255.255.0
push "route 192.168.16.0 255.255.255.0 192.168.16.1"
push "route 192.168.17.0 255.255.255.0 192.168.17.1"
route 192.168.17.0 255.255.255.0 192.168.17.1
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ta.key" 0
cipher AES-256-GCM
keepalive 20 60
persist-key
persist-tun
client-to-client
status "C:\\Program Files\\OpenVPN\\log\\status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
verb 5
mute 20
windows-driver wintun
user nobody
group nogroup
ifconfig-pool-persist ipp.txt
proto udp4
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\issued\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\private\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\dh.pem"
local 192.168.16.106
topology subnet
server 192.168.17.0 255.255.255.0
push "route 192.168.16.0 255.255.255.0 192.168.16.1"
push "route 192.168.17.0 255.255.255.0 192.168.17.1"
route 192.168.17.0 255.255.255.0 192.168.17.1
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ta.key" 0
cipher AES-256-GCM
keepalive 20 60
persist-key
persist-tun
client-to-client
status "C:\\Program Files\\OpenVPN\\log\\status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
verb 5
mute 20
windows-driver wintun
user nobody
group nogroup
ifconfig-pool-persist ipp.txt
On server (192.168.16.106) i can ping all devices of 192.168.16.0/24 and 192.168.17.0/24
From VPN clients i can ping all devices of 192.168.16.0/24 and 192.168.17.0/24
But I can't ping 192.168.17.0/24 from 192.168.16.0/24
tcpdump (ported) on server (192.168.16.106) with filter on icmp packets logging only requests from 192.168.16.105 to 192.168.17.x but tracing from 192.168.16.x ended by timeout even without hops in 192.168.16.1 and 192.168.16.106
Firewalls on all devices is off, routing on windows server is on, also i can connect via rdp from vpn to lan but not from lan to rdp
What i did wrong? Is it issue in my config or something else?