OpenVPN on FC4 - client and server cannot ping each other

[Paul Howarth]

Khemera Lin wrote:
> Dear All,
> 
> First, let me apologize as it may not be a right topic to ask here. I hope,
> some of you have come across and solved the same problem already.
> 
> I’ve been having problem with OpenVPN server on my FC4 box and client on my
> XP box. I could connect from the client to the server but could not ping.
> 
> My connection diagram looks like this:
> 
> 
> Client1  <--->  Mikrotik (with NAT)  <---> FC4 (OpenVPN Server) <---> CISCO
> 7206  <---> Client2
>                                                   
> |                                            
>                                                 Client3
> 
> If I tried to connect from Client3 (without passing through the Router or
> Mikrotik NAT), it is fine; they can ping each other. However, when I try to
> connect from Client1 (through Mikrotik 2.9 with NAT) or Client2 (from
> outside through my border Router with IOS 12.0), they cannot ping each
> other.
> 
> For Client1, I’m quite sure, it is the problem of Mikrotik firewall/NAT
> rules. For Client2, it may be the Router access-list policy. I’m desperate
> in how to resolve this after searching through the Web for a while, esp. the
> OpenVPN web site. I hope, some of you have had the same experience and would
> help me out.

Perhaps the router/firewall is blocking ping packets? Does anything else 
work? Can you ssh into the server from the clients?

Paul.