OpenVPN TAP Interface is up, but…
-
Hello everyone,
I'm having a strange issue with TAP bridging with my LAN. Currently I have the TAP bridge set up, users are getting the IP's that I designated, I have a LAN any any any rule, and a TAP any any any rule (proto, source, dest) However, the clients are unable to ping one another. They can me the server and the bridged LAN, the server and bridged LAN can ping the clients, but the clients are not able to ping each other.
Is there a specific rul I have to set up to allow the TAP clients to be able to ping each other? I have a feeling that if they are not able to ping each other, they would also not be able to host LAN games, or share files amongst them selves.
Any Ideas would be greatly appreciated! I will update the thread with all me ideas, and document the results.
/esink
-
I'm not sure if this is only generated for routed setups, but Under VPN -> OpenVPN, in the Tunnel Settings section, there is an option for Inter-client communication with a check boxed labeled "Allow communication between clients connected to this server". If it's there, check it.
Otherwise, it looks the switch for inter-client communication generates a server option labeled:
client-to-client
you can try adding that to your advanced config box.
Also, make sure it's not just the software firewall blocking ICMP.
-
I'm not sure if this is only generated for routed setups, but Under VPN -> OpenVPN, in the Tunnel Settings section, there is an option for Inter-client communication with a check boxed labeled "Allow communication between clients connected to this server". If it's there, check it.
Otherwise, it looks the switch for inter-client communication generates a server option labeled:
client-to-client
you can try adding that to your advanced config box.
Also, make sure it's not just the software firewall blocking ICMP.
That was exactly the problem. I was just logging in to post that the problem is solved!
The only weird quirk now is that Clients can't see games that I host, but I can see theirs. Time for more testing! :D