Pinging from one client machine to another client machine

[DD11]

Hi
I have setup OpenVPN server and is working fine. Just curious to know why the clients of OpenVPN servers are not able to ping to their respective tunneled IP address ?

Client 1 IP: 10.0.8.2
Client 2 IP: 10.0.8.3

Client 1> ping 10.0.8.3
Pinging 10.0.8.3 with 32 bytes of data:
Request timed out.
Request timed out.

Regards

[Gertjan]

Hi,

?!

edit :

The firewall accepts ICMP packets ? For the correct destination ?

[DD11]

Hi
@Gertjan
Thanks for the reply. The options are set/checked. I have setup pfsense on its LAN interface only without firewall.

So i think ICMP packets are already allowed.

Regards

[Gertjan]

@DD11 said in Pinging from one client machine to another client machine:

So i think ICMP packets are already allowed.

OpenVPN clients are not connected to the LAN interface, so the firewall rules on the LAN interface are not used.

The OpenVPN is different way of connecting to the router/vpn server pfSense, so a special interface is connected. I guess you already saw it : OpenVPN.

Check out the OpenVPN "server" video from Netgate on Youtube. Several exist, as OpenVPN became a popular subject since March 2020.

[Pippin]

If the --client-to-client option (Inter-client communication) is active, these packets are not exposed to the server host (pfSense in this case).
Firewall rules will therefore not have any effect.
https://community.openvpn.net/openvpn/wiki/HowPacketsFlow

Check the client(s) firewall.