Cannot Route to OpenVPN Client Subnet from Server
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
I am able to create an OpenVPN Client on the AX1800 (Archer AX20). It successfully connects and I can ping the Server from the AX1800 side. I cannot ping the AX1800 from the Server. The OpenVPN server is running on a Windows machine. "iroute" commands are imbedded in a ccd file on the server side so it can do proper routing to the LAN subnet on the AX1800. I have another maching running Linux that connects to the Windows OpenVPN server and this verifies that the "iroute" commands work properly (I can ping Linux LAN IP addresses from the Server).
Is there anyway for the Server side to be able to route to the OpenVPN Client on the AX1800?
The following is my .ovpn file that I loaded into the AX1800:
client
dev tap
proto udp
remote 1.2.3.4 1194
resolv-retry infinite
nobind
user nobody
group nogroup
remote-cert-tls server
cipher AES-256-CBC
verb 0
cipher AES-256-CBC
auth SHA512
key-direction 1
<ca>
-----BEGIN CERTIFICATE-----
.
.
.
-----END CERTIFICATE-----
</ca>
<cert>
.
.
.
-----BEGIN CERTIFICATE-----
.
.
.
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
.
.
.
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
.
.
.
-----END OpenVPN Static key V1-----
</tls-auth>
Hello @mwelv
Thank you for reaching out to us and welcome to the TP-Link community.
Do you mean you want to access the PCA from the PCB in the above diagram? That is not allowed on the Client-to-Server setup. You can only access the server from the client, but not the other way round.
I also replied to bs207 in this thread, please have a check:
https://community.tp-link.com/us/home/forum/topic/538434?replyId=1054820