|
|
Thanks for your help, I think that it's a problem of subnet numbering. We have the same (192.168.0.0) at the two offices and as the HOWTO says, that causes problems (I had not read that section). My problem is that I can't go to the other office and change the IP addresses, and they don't have administrator rights to do it. Is there a way to connect the two subnets with the current numbering? > > >Toni Casueps wrote: > > The router is a Zyxel Prestige P660HW-61. I've been told that it's a >good > > router, and at the server side there is this same router too so I think >it > > manages UDP ok. However at the server side I have the openvpn udp port >open, > > but not at the client side because I can't forward that port to a single > > computer (several of them need to use the vpn.) Could it be because of >this? > >It is not the question of opening the port, it is the question if the >router does NAT UDP packets correctly. The router needs to keep track of >outgoing UDP packets and match them to incoming packets. > >To check this, you could use TCP, which is less problematic for routers. >I would not recommend it for everyday usage though, look for TCP over >TCP tunnel in the archives. > > > > (In other office which has a different router, the VPN went up without > > opening ports, so I guess it's not necessary... i have no idea...) > >You could install ethereal on the client and watch the packets as they >come and go on the client. You will quicly see if the packets from the >server show up. > >cheers > >Erich ______________________ OpenVPN mailing lists https://lists.sourceforge.net/lists/listinfo/openvpn-users |