[Openvpn-users] Strange issue... client/server - routed setup

[Chris Stankaitis <chris@xxxxxxxxxxx>]

I am setting up an openvpn server for road warriors, have the road
warriors using Linux laptops and the server is also on Linux.  I can
connect into the VPN from the client, auth using our OTP Two Factor
Auth, get the routes and redirect-gateway from the server, however when
I try and hit anything internal to the vpn, the VPN server isn't arp'ing
for the client.

I.E. my Client 10.7.0.205 my server IP 10.7.0.201  ping 10.6.0.66.. when
I tcpdump I see the ICMP getting all the way to 10.6.0.66 and it begins
it's return trip when it hits the firewall with the 10.7.0.1 GW it
broadcasts to see who has 10.7.0.205 the vpn server (10.7.0.201) should
be responding at this point to let the other boxes know that it can
deliver the packets but it's not.

I though the "route" directive in the server.conf told the server what
IP's it would route for and based on that the server would arp for the
block spelled out in the route directive but that's not happening.

I don't see a specific command to tell the server to arp for the clients.

If I manually enter the arp on the vpn server everything works fine...
is there a way to get OpenVPN to do this by default, or do I need to
setup some kind of a on connect and on disconnect script to manually add
and break down the arp entry when a client connects?

Thanks!

--Chris
______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users