Accessing OpenVPN Client resources from another OpenVPN Client

[Costa Rica]

I have 1 UT Server with multiple OpenVPC Clients.
Facts:
- All the machines are Windows XP Pro SP3.
- I CAN access the internal network resources from the remote UT Server from any client
- I CAN NOT access any OpenVPN Client resources from the internal network of the UT Server nor from another OpenVPN Client.
- I CAN ping the OpenVPN Client from the internal network of the UT Server.
- I CAN NOT ping the OpenVPN Client from another OpenVPN Client.
- The OpenVPN Clients have the Windows Firewall OFF.
- The OPenVPN Client are connected directly to the internet (DSL Router).

Question:
- How can I access the OpenVPN Client resources either from the internal network of the UT Server or from another OpenVON Client?

Thanks in advance!

[WebFooL]

Hi and Welcome to the forums,

Have you exported the VPN address pool?
Do you have Firewall Rules that can block Access from VPN to VPN?
Do you have Firewall Rules that Allow VPN to VPN traffic?

As every VPN Address has its own bordcast address it will need to comunicate over the Firewall.. there for you will need a rule or default pass mode.

[Costa Rica]

Hi and Welcome to the forums,

Thanks!

Have you exported the VPN address pool?

Yes, and I can access the internal network FROM the client, but not the client's resources from within the UT Server internal network.

Do you have Firewall Rules that can block Access from VPN to VPN?

The client's Windows xp Firewall it Off.

Do you have Firewall Rules that Allow VPN to VPN traffic?

-Do I check this in the UT Server?

As every VPN Address has its own bordcast address it will need to comunicate over the Firewall.. there for you will need a rule or default pass mode.

- How and where do I do this?

Thanks for your help

[WebFooL]

Hi,

I get that you have Exported your internal Network.
But have you exported the VPN address pool to? (172.16.0.0/24)

If you use the Firewall module in Untanlge check if it is default pass or block.

[Costa Rica]

I do use the Firewall module and the default is pass. Recall that I can ping the client's IPs, what I can not do is access their resources or do remote desktop, but I can do all that from the client's side.

I installed basically every UT module and left the defaults. I will turn off all the modules just to check if one of them is the cause.

[WebFooL]

Just so we are speaking of the samething.

I want a VPN client to be able to Access another VPN client.

Ex Client 172.16.0.5 to Client 172.16.0.9
Is this correct?

[Costa Rica]

Exactly (BTW, those are the IP addresses of the 2 clients).

[WebFooL]

Can you post a ScreenShot of the Export Tab?

[Costa Rica]

Sure.

[WebFooL]

Try to add a export for the VPN network
172.16.0.0/24