OpenVpn - devices not visible on network, but responding

Technical Support for Routers VPN, DNS, Leaks
1

Hi,
I'm trying configure VPN connection between one client workstation and 7 servers (all windows based).
Windows machines responding for ping when connected on LAN (ip 192.168.1.x and I can connect from client to server using dedicated software (it's using ports 6474 to 6477)
I have GL-MT2500 where I try setup ovpn or wireguard server.

My current topology (test environment) is:
test enviroment

I've forwarded port 51820& 1194 to glinet address and I'm able successfully establish vpn connection, however windows machines not responding for ping using vpn address (eg for wireguard one machine has address 10.0.0.3 and second 10.0.0.9)

that's logs from my server:
Sat Aug 3 13:01:19 2024 daemon.notice netifd: Network device 'wgserver' link is up
Sat Aug 3 13:01:19 2024 user.notice wgserver-route: route_flag=4, dest=10.0.0.2, mask=24, gateway=, metric=, mtu=
Sat Aug 3 13:01:19 2024 daemon.notice netifd: wgserver (8650): RTNETLINK answers: Invalid argument
Sat Aug 3 13:01:19 2024 user.notice wgserver-route: route_flag=4, dest=10.0.0.9, mask=24, gateway=, metric=, mtu=
Sat Aug 3 13:01:19 2024 daemon.notice netifd: wgserver (8650): RTNETLINK answers: Invalid argument
Sat Aug 3 13:01:19 2024 user.notice firewall: Reloading firewall due to ifup of wgserver (wgserver)

It's doesn't matter for me if I'll connect through wireguard, ovpn or anything else (not too much data to send). I have to create virtual LAN network to have servers visible from client station.
Finally I'll have 8 machines: one client and 7 servers working on ports 6474-6477, most of them will be connected through separated broadband:
final enviroment

I believe it's something basic what I can't figure out. What am I missing?

2

Check Windows firewall, it blocks ICMP by default for all networks that are not marked as private.

3

I've temporary switched off windows firewall. when I deactivate wireguard, I can ping second machine (192.168.1.x). When wireguard is activated on this machine, not responding on 192.168.1.x (what I believe is correct), but as well not responding on 10.0.0.x - address from wireguard settings

4

UPDATE:
looks like UDP is blocked by ISP.
I've changed openvpn port to TCP and now devices responding for ping, however:
I have discovery software attached to client (it's Paxton access control).
I can't discover devices and can't connect to the Paxton server when I'm connected through vpn ;/

1 Like