I'm using OpenVPN Access Server 184.108.40.206 in Amazon VPC. I've used the custom AMI that has OpenVPN Access Server preinstalled.
My VPC is 10.11.0.0/16 My public subnet is 10.11.1.0/24
OpenVPN Server: 10.11.1.10 + ElasticIP Test Server: 10.11.1.20
VPN Subnet is dynamic and is the default 220.127.116.11/20
Once connection is established, my workstation (VPN client) gets an IP of 18.104.22.168 On the VPN Server, ifconfig shows two related IPs: 22.214.171.124, 126.96.36.199
In Advanced VPN -> I've set "Should clients be able to communicate with each other on the VPN network?" to Yes.
I've set Access Server to route mode and it's nearly all working: From my workstation, I can connect to the VPN server and ping it on its private IP (10.11.1.10). I can also ping and get replies to a server behind it on 10.11.1.20 (I've set up a route in Amazon VPC admin console).
From the Access Server, I can ping my workstation IP on 188.8.131.52
However, from the server in Amazon VPC at 10.11.1.20, I cant ping my workstation at 184.108.40.206 I do get ping replies from 220.127.116.11 and 18.104.22.168
How do I set this up so that from 10.11.1.20 I can ping my workstation at 22.214.171.124? Have I misconfigured something in Access Server, or can't I set it up like that using the GUI?