How to ensure that clients can access each other within the OpenVpn Tun network (ASUS RT-AC66U B1)?

Question

openvpn

Hello. There is an ASUS RT-AC66U B1 router. On it, I turned on the OpenVPN server and selected TUN. I did not choose TAP, because I want to log in from Android in the future. Then was able to connect with win and linux OpenVPN client.

On the router, I see that the connection with clients is active and addresses are assigned to them. In this case, the addresses
are 10.8.0.6 and 10.8.0.14. At the same time, being on the 0.6 machine, I cannot ping 0.14.

As far as I understand, you need to set up routing so that VPN network clients can see each other, but I don’t know how to do this.

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.8.0.2        *               255.255.255.255 UH    0      0        0 tun21
XX.XX.XX.XX    *               255.255.255.255 UH    0      0        0 eth0
XX.XX.XX.XX    *               255.255.255.128 U     0      0        0 eth0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun21
192.168.1.0     *               255.255.255.0   U     0      0        0 br0
127.0.0.0       *               255.0.0.0       U     0      0        0 lo
default         broadband-188-2 0.0.0.0         UG    0      0        0 eth0

10.8.0.2 dev tun21  proto kernel  scope link  src 10.8.0.1
XX.XX.XX.XX dev eth0  proto kernel  scope link
XX.XX.XX.XX/25 dev eth0  proto kernel  scope link  src XX.XX.XX.XX
10.8.0.0/24 via 10.8.0.2 dev tun21
192.168.1.0/24 dev br0  proto kernel  scope link  src 192.168.1.1
127.0.0.0/8 dev lo  scope link
default via 188.244.35.1 dev eth0

Actually a question - how to configure access of clients to each other?

Answer 1

Yes, you need routing or a directive client-to-clientin the server config.
https://serverfault.com/questions/736274/openvpn-c...