I have OpenVPN set up on a Debian gateway server. Openvpn server gateway router lan is The Gateway IP is Below the openvpn.conf file:

port 1194 proto udp dev tun ca ca.crt cert ccrr.crt key ccrr.key dh dh1024.pem server ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo user nobody group users persist-key persist-tun status openvpn-status.log verb 4 client-to-client route push "route" push "route"

The client-side LAN network is and gateway IP is LAN vpn is After you successfully connect vpn vpn server has the following IP and client. The client ping the server and all the LAN connected to him including the ADSL router with IP The OpenVPN ping server successfully IP but can not ping the IP address of the client LAN, ie or the ADSL gateway of the LAN client, ie

These are the server-side routes:

root@ccrr:/# route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface UG 0 0 0 eth0 U 0 0 0 eth1 UG 0 0 0 tun0 UH 0 0 0 tun0 U 0 0 0 eth0 U 0 0 0 eth2 UG 0 0 0 tun0

I plugged in the firewall configuration with the following rules: iptables -A INPUT -i tun+ -j ACCEPT iptables -A OUTPUT -o tun+ -j ACCEPT

I followed the guide below to indicate to the server which route to follow to find the LAN client. Including multiple machines on the client side when using a routed VPN (dev tun).

I have the same problem when I try to install as a client another openvpn Debian gateway router. Everything works: the client connects to the server and can ping both the gateway server and openvpn both connected devices to its LAN, but not the reverse is true. That is, if the VPN gateway server, or the devices connected to its LAN, try to ping the client does not have any answers.

I tried to see what happens with tcpdump to ICMP packets when sending the ping command from the server to the client and this is the result:

18:12:01.335462 ip: > ICMP echo request, id 5855, seq 1, length 64 18:12:02.334983 ip: > ICMP echo request, id 5855, seq 2, length 64

Please help me understand why this happens and how I can solve this problem. Sorry for my bad english. Grazie.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.