Make clients see each other without client-to-client
-
According to OpenVPN manual when
client-to-client
is not set, all packets should be sent toovpns
/tun
interface
https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/I am using
tun
setup and I disabledclient-to-client
. But I put an all PASS rule toOpenVPN
tab in firewall.I check with tcpdump the
ovpns1
interface and try to ping another client which is also connected to same OpenVPN server. The tcpdump does not see any packets and I am not able to reach to the other client.My understanding is that the packets should be routed through
ovpns1
and it should still be possible to reach the other client even withoutclient-to-client
option.Why this does not work? Any ideas?
-
Nevermind, the reason was that the openvpn had topology net30... changed it to subnet and things are working!