Can't ping openVPN from LAN segment

[rogertruong]

Hi Everyone,
I need some help on openVPN on untangle.

I have setup untangle as a VPN server and Untange is setup as a router with the following

1) LAN = 192.168.22.1/255.255.255.0
2) VPN = 192.168.23.0/255.255.255.0

I was able to connect to the VPN server from my home. and able to ping the computer on the LAN segment 192.168.22.0/24

I was unable to ping from LAN to any VPN client connected to the untangle server
What do I need to setup so that the LAN segment will be able to ping the VPN Client?

Thanks a lot
Roger

[Chumley]

Heya Roger,

Most Client-Server VPN connections are one-way. I have only seen two-way on the big dollar firewalls like Check Point. The reason you have a VPN IP subnet is for ease of routing on your firewall and to be able to offer some advanced features like DNS request routing.

If it can be done, it is usually done with keep-alives generated by the client. This is literally keeping a connection open at all times. Note that the direction of travel is important too. The client initiates all conversations in this scenario (client-server VPN). So to make the server be able to "reach back" to the client, the client must open and maintain a connection, hence the keep-alives.

I don't think that OpenVPN supports that at this time, but I could be talking out of my hat. I would find the website for OpenVPN and see what the project docs say.

Regards,

Chumley