Blame
| 4456b3 | Samuli Seppänen | 2025-02-11 11:14:25 | 1 | # OpenVPN can ping both peers, but I can't reach any of the other machines on the remote subnet. |
| 2 | ||||
| 3 | - Make sure that the firewall is not filtering the TUN/TAP interface. |
|||
| 4 | - Make sure you have [IP forwarding](http://openvpn.net/index.php/open-source/faq/community-software-server/265-how-do-i-enable-ip-forwarding.html) enabled on the server. |
|||
| 5 | - If you are using routing (not [ethernet bridging](wiki:BridgingAndRouting)), ensure the clients (or LAN gateway) have a route back to the server for the packets coming in over the tunnel. This can be achieved by: |
|||
| 6 | - Adding a route in your default gateway for the VPN network IP subnet pointing to the OpenVPN machine, |
|||
| 7 | - Adding a route to every client, or |
|||
| 8 | - NATing all VPN traffic to the local address of the OpenVPN machine for network traffic which leaves the OpenVPN machine for the local net. |
|||
| 9 | - If you are hosting the OpenVPN server on an Amazon Web Services (AWS) EC2 instance, make sure "Source/Destination Checking" is disabled on the instance's Elastic Network Interface (enabled by default). |
|||
| 10 | ||||
| 11 | - If you are still stumped, use **tcpdump**, **wireshark**, or **WinDump** to determine where packets are being dropped. |