I have 2 openvpn instances on one server (TCP and udp). One has clients in subnet and another Server IPs are and

openvpn server with 2 instances and 2 clients

Is it possible to ping client from client?

  1. I added route to on 1.2 client via so ping packets with dst address should go to openvpn server and come from tun1 interface.

  2. I also enabled net.ipv4.ip_forward=1 in sysctl.conf and rerun sysctl --system.

  3. Then I configured iptables to forward:

    iptables -A FORWARD -i tun1 -o tun0 -s -d -j ACCEPT
    iptables -A FORWARD -i tun0 -o tun1 -s -d -j ACCEPT

But still it does not work... I am missing something...

Also need to add analogical route on other client!

  • 1
    Does have a route to via the server? You will have to add routes both ways. – Teun Vink Jun 22 '16 at 8:02

Answer is that I were needed to add route on both clients

  • Leaving it here for others: Also on server, do not forget to enable net.ipv4.ip_forward = 1 in /etc/sysctl.conf. Also check your firewall rules. – jiri.ohnheiser Nov 1 '17 at 23:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.