Thanks for your response.
My server config is above the post.
Others config files and stats are down below.
Here's my openvpn server interfaces config:
## This is the network bridge declaration
auto lo br0 ## start on boot
iface lo inet loopback
iface br0 inet static
address 10.10.1.2
netmask 255.255.255.0
gateway 10.10.1.1
bridge_ports eth0
iface eth0 inet manual
up ifconfig $IFACE 0.0.0.0 up
up ip link set $IFACE promisc on
down ip link set $IFACE promisc off
down ifconfig $IFACE down
bridge_fd 9 ## from the libvirt docs (forward delay time)
bridge_hello 2 ## from the libvirt docs (hello time)
bridge_maxage 12 ## from the libvirt docs (maximum message age)
bridge_stp off ## from the libvirt docs (spanning tree protocol)
Here's my client config:
client
dev tap
remote vpnmain.csaa.com 1194
nobind
resolv-retry infinite
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1
cipher BF-CBC
comp-lzo
verb 3
route 10.10.1.0 255.255.255.0 vpn_gateway
Here's my iptables:
Chain INPUT
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt

penvpn
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dptopenvpn
ACCEPT udp -- anywhere anywhere udp dptopenvpn
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpt
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain FORWARD
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain OUTPUT
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dptopenvpn
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dptopenvpn
ACCEPT udp -- anywhere anywhere udp dptopenvpn
ACCEPT udp -- anywhere anywhere udp dptopenvpn
ACCEPT all -- anywhere anywhere
Here's my routing in openvpn server:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.10.1.0 0.0.0.0 255.255.255.0 U br0
0.0.0.0 10.10.1.1 0.0.0.0 UG br0
Please advise if you have other questions.
Any help much appreciated.
Cheers!
DB