Where did the pings go on the OpenVPN network?

Question

openvpn

Good day! In the morning, an unexpected and not at all pleasant problem appeared, there is a server on Win 2008 r2, an OpenVPN network is deployed on which branches operate, and so the problem is as follows: OpenVPN connects and the client receives the IP address it needs from the ipp.txt config on the server, then no connection No, pings do not pass in any direction. Those. in fact, there is a connection, but there is no connection ... OpenVPN reinstalled along with the Windows TAP adapter, did not change user certificates and configs (because they worked fine for a long time). I sin on Windows, somewhere it blocks this subnet and I just can’t find where, maybe some service has gone out. Share your experience dear friends.
Server config just in case, although I'm almost sure that OpenVPN itself has nothing to do with it.

#Поднимаем L3-туннель
dev tun
# Протокол
proto udp
# Порт который слушает впн
port *такой-то*
# Ключи и сертификаты
ca ca.crt
cert server.crt
key server.key 
dh dh1024.pem
# Грубо говоря экономим адреса
topology subnet
# Пул адресов
server 192.168.2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
# Метод шифрования
cipher AES-128-CBC
# Сжатие
comp-lzo
# Немного улучшит пинг
mssfix
# Время жизни клиентов, если не откликнулся — отключает
keepalive 10 120
# Уровень отладки
verb 3
client-to-client
push «dhcp-option DNS 192.168.2.1»

Client config

client
dev tun
proto udp
# Адрес и порт сервера
remote *адрес порт такой-то*
# Ключи должны лежать в папке с конфигом
ca ca.crt
cert vr.crt
key vr.key
cipher AES-128-CBC
nobind
comp-lzo
persist-key
persist-tun
verb 3

Answer 1

ldv: strange
192.168.2.0 255.255.255.0
should be added automatically on the server,
did you add this route by hand before?
ldv: route ADD -p 192.168.2.0 MASK 255.255.255.0 192.168.2.1 METRIC 1
Many thanks to user ldv

Answer 2

Rules for IPTABLES.
# allow icmp packets through vpn
# (required for ping)
$ip -A INPUT -p icmp -m icmp -i $VPN_IFACE --icmp-type echo-request -j ACCEPT
$ip -A OUTPUT -p icmp -m icmp - o $VPN_IFACE --icmp-type echo-request -j ACCEPT
$ip -A FORWARD -p icmp -m icmp -i $VPN_IFACE -o $LAN_IFACE --icmp-type echo-request -j ACCEPT
$ip -A FORWARD - p icmp -m icmp -o $VPN_IFACE -i $LAN_IFACE --icmp-type echo-request -j ACCEPT
$ip -A INPUT -p icmp -m icmp -i $VPN_IFACE --icmp-type echo-reply -j ACCEPT
$ip -A OUTPUT -p icmp -m icmp -o $VPN_IFACE --icmp-type echo-reply -j ACCEPT
$ip -A FORWARD -p icmp -m icmp -i $VPN_IFACE -o $LAN_IFACE --icmp-type echo-reply -j ACCEPT
$ip -A FORWARD -p icmp -m icmp -o $VPN_IFACE -i $LAN_IFACE --icmp-type echo-reply -j ACCEPT