how many instances of i are there in:
q: openvpn server cannot ping client ips i have flashed a router at two separate sites with dd-wrt firmware and setup openvpn on both. once connected the client can ping computers on the servers lan however the server cannot ping ips on the clients lan. i am executing the ping command in the shell for the routers (so i dont have to remote into local machines etc.)
i disabled the firewall at both sites (this is being done on a test config). am i still missing something here? the config i used is below. id really appreciate any help/guidance.
do i need to also push a route to the vpn server ips?
192.168.2.0 is client subnet
192.168.4.0 is server subnet
thank you
sever.conf
server 192.168.5.0 255.255.255.0
client-config-dir /tmp/openvpn/ccd
route 192.168.2.0 255.255.255.0
push route 192.168.4.0 255.255.255.0
push route 192.168.2.0 255.255.255.0
client-to-client

dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management port
management localhost 5001

startup command
mkdir -p /tmp/openvpn/ccd
echo iroute 192.168.2.0 255.255.255.0 > /tmp/openvpn/ccd/client1

server router kernel ip routing table
destination     gateway         genmask         flags metric ref    use iface
192.168.5.2     *               255.255.255.255 uh    0      0        0 tun0
192.168.5.0     192.168.5.2     255.255.255.0   ug    0      0        0 tun0
192.168.4.0     *               255.255.255.0   u     0      0        0 br0
192.168.2.0     192.168.5.2     255.255.255.0   ug    0      0        0 tun0
192.168.1.0     *               255.255.255.0   u     0      0        0 vlan1
169.254.0.0     *               255.255.0.0     u     0      0        0 br0
127.0.0.0       *               255.0.0.0       u     0      0        0 lo
default         192.168.1.1     0.0.0.0         ug    0      0        0 vlan1

client router kernel ip routing table
destination     gateway         genmask         flags metric ref    use iface
192.168.5.5     *               255.255.255.255 uh    0      0        0 tun0
192.168.5.0     192.168.5.5     255.255.255.0   ug    0      0        0 tun0
192.168.4.0     192.168.5.5     255.255.255.0   ug    0      0        0 tun0
192.168.2.0     *               255.255.255.0   u     0      0        0 br0
74.21x.xx.0     *               255.255.255.0   u     0      0        0 vlan1
169.254.0.0     *               255.255.0.0     u     0      0        0 br0
127.0.0.0       *               255.0.0.0       u     0      0        0 lo
default         static-74-21x-x 0.0.0.0         ug    0      0        0 vlan1

client setup (just in case)


a: you need to remove one of your push statements.
the server needs to push the announcement of its own subnets to the client so the client knows to route all 192.168.4.0 traffice through the vpn tunnel.
but you are also telling the client if you see packets destined for 192.168.2.0, send them over the vpn.  this will cause the server-to-client traffic to get lost in the vpn and never make it out onto the client network.
remove that second push line, and you should be ok.

user
There are eighty-four "i"s in the text you provided.
assistant