The most predominant problem is ping packets that are sent to certain clients don't get a reply back. I am not sure if it was something I was testing at the time that caused this or not. I do however remember observing at one point seeing ping packets being lost in the server (tcpdump showed icmp packets being received, but not passed onto the respective client).

I have ipv4 forwarding set in nf, and the firewall is not blocking the packets (have tried with firewall turned off). Everything except client to client connections are working properly. I have dev tap in the server and all client configs, and I haven't set up any kind of bridging. 'You can use TAP without a bridge so try it' I thought that was what I was already doing, and it just isn't working for client to client connections. My server is exclusively connected directly to the internet, no LAN to bridge to.Īny help with understanding/fixing this would be greatly appreciated. Is ethernet bridging really what I want? By my understanding bridging is for connecting VPN clients to a LAN, as in a office setting, where clients can connect to the VPN and it is as if they are actually connected the the office network. 4 gets ping packets showing on tcpdump -i tap0 host 10.8.0.24,īut nothing on tcpdump -i tap0 host 10.8.0.4, and pings form the server to. Pings from clients to the server never fail. Pings from client to client usually work, but fail on certain clients, even from the server. This is a poorly drawn illustration of the setup: My VPS is not on a private subnet nor is it a gateway for one and it is certanly not a DHCP server (except for the VPN). I get the idea that ethernet bridging is for connecting a LAN to the VPN, as to allow seamless connection between LAN clients and VPN clients. I have seen many people asking about this, and the common response is ethernet bridging.

(not working) Allow unhindered connection between all clients on the VPN, as to allow LAN Gaming EXCLUSIVELY over the VPN. (working) Allow routing of all traffic through the server, using it as a gateway (through the use of an alternative client config with 'redirect-gateway def1')ģ.

(working) Create a secure VPN that will allow the administration of the server through services like webmin and SSH through an extra layer of security (VPN SSL).Ģ. I am failing at getting client to client connections to work they way they should.ġ.

Mtu f5 vpn client