Dear Sir.
I established the diagram connection like Picture.
The OPEN VPN connection was OK. From PC1 I can ping to 10.8.0.20 of VPN Client. On Client Site, I have PC run application port 2404. I Create port forwarding 2404 on VPN Client router. I want PC1 received this service via port 2404. But can't work.
I don't know why?
Anyone help me please.
Many thank
Can you ping from PC2 to PC1?
Is Masquerading enabled on the VPN firewall zone of the OpenVPN client?
Dear Sir.
PC1 can ping to 10.8.0.20 virtual IP os VPN router client. And PC2 can ping to 10.8.0.1 virtual IP of VPN server. PC1 can't ping directly to LAN Pc 2 and resever. Because, if it can, I don't need to port forward.
I trust you can ping from the VPN client to PC1?
Note that a normal port forward only forwards from the WAN, you have to port forward from VPN interface.
This is usually done with symmetric routing. On OpenVPN that requires configuring the server with a client config directory containing an iroute for the client's LAN. Then the routing tables on both sides will be automatically configured as the connection comes up. Is there some reason you're not symmetric routing and using NAT instead? And if so, where is NAT being used and in which direction? Port forwarding is a way to connect backwards through NAT. The concept of port forwarding is not relevant when symmetric routing since NAT is not in use.
1 Like