Couldn't ping VPN net from server-side LAN

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
Skworec
OpenVpn Newbie
Posts: 1
Joined: Thu Feb 01, 2024 7:09 pm

Couldn't ping VPN net from server-side LAN

Post by Skworec » Thu Feb 01, 2024 7:38 pm

Hello everyone. I'm new in OpenVPN and need some help with my problem.

My network configuration is
- LAN: 192.168.16.1/24
- My PC: 192.168.16.105
- Server with OpenVPN: 192.168.16.106
- VPN LAN: 192.168.17.1/24

On router i already configured static ip route:
192.168.17.0/24 gw 192.168.16.106

OpenVPN Community installed on Windows Server 2019 Standart
My PC has Windows 11 Pro

My ovpn configuration:
- server.ovpn
server.ovpn
port 1194
proto udp4
dev tun

ca "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\issued\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\private\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\dh.pem"

local 192.168.16.106
topology subnet
server 192.168.17.0 255.255.255.0
push "route 192.168.16.0 255.255.255.0 192.168.16.1"
push "route 192.168.17.0 255.255.255.0 192.168.17.1"
route 192.168.17.0 255.255.255.0 192.168.17.1

tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ta.key" 0
cipher AES-256-GCM
keepalive 20 60
persist-key
persist-tun
client-to-client
status "C:\\Program Files\\OpenVPN\\log\\status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
verb 5
mute 20
windows-driver wintun
user nobody
group nogroup
ifconfig-pool-persist ipp.txt


On server (192.168.16.106) i can ping all devices of 192.168.16.0/24 and 192.168.17.0/24
From VPN clients i can ping all devices of 192.168.16.0/24 and 192.168.17.0/24
But I can't ping 192.168.17.0/24 from 192.168.16.0/24

tcpdump (ported) on server (192.168.16.106) with filter on icmp packets logging only requests from 192.168.16.105 to 192.168.17.x but tracing from 192.168.16.x ended by timeout even without hops in 192.168.16.1 and 192.168.16.106
Firewalls on all devices is off, routing on windows server is on, also i can connect via rdp from vpn to lan but not from lan to rdp
What i did wrong? Is it issue in my config or something else?

Post Reply