We're using OpenVPN at a branch office to connect remote users and it's working very well for internal resources, but recently we've added a permanent VPN connection between the branch office and head office, and I can't for the life of me get any OpenVPN remote users to see the servers at the head office across the permanent VPN. Here's a brief diagram:
To explain, the branch office is on 10.0.0.x, when the VPN to the head office was put in, it was assigned a different subnet of 10.100.0.0 and I created an IPFire VM that is used by workstations on the 10.0.0.x network as a gateway to the 10.100 network. I then added a permanent route to the workstations on 10.0.0.x for the head office server resources on the 10.200.x.x subnet as follows:
route add -p 10.200.0.0 mask 255.255.0.0 10.0.0.245
And all the internal workstations can see the head office resources perfectly. Any OpenVPN clients cannot, however. The OpenVPN clients can see resources on the 10.0.0.x subnet perfectly, and can ping the IPFire gateway that's being used by the internal workstations, but adding a route to the OpenVPN clients does not allow them to see any head office network resources. Any ideas what to check on the OpenVPN installation?