Normalmente, para o OpenVPN, as pessoas têm problemas ao acessar as interfaces de LAN, mas não há problemas em acessar as interfaces do TUN. Eu tenho o problema oposto.
Ping do cliente (10.9.0.1) para o servidor eth0 (10.0.0.97) funciona
$ sudo tcpdump -i tun0 -n
04:06:13.702540 IP 10.9.0.1 > 10.0.0.97: ICMP echo request, id 1, seq 10, length 40
04:06:13.702591 IP 10.0.0.97 > 10.9.0.1: ICMP echo reply, id 1, seq 10, length 40
Ping do cliente (10.9.0.1) para o servidor tun0 (10.8.0.1) tempo limite
Os arquivos de log do OpenVPN não produziram erros no verbo 5
$ sudo tcpdump -i tun0 -n
04:08:23.989997 IP 10.9.0.1 > 10.8.0.1: ICMP echo request, id 1, seq 12, length 40
(no reply from server)
$ sudo service iptables status
iptables: Firewall is not running.
Ping do servidor (10.8.0.1) para o cliente (10.9.0.1) inacessível
Os arquivos de log do OpenVPN não produziram erros no verbo 5
$ ping 10.9.0.1
connect: Network is unreachable
$ip route get 10.9.0.1
10.9.0.1 via 10.8.0.2 dev tun0 src 10.8.0.1
$ route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 eth0
10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.0.0.0 10.8.0.2 255.255.0.0 UG 0 0 0 tun0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.9.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
$ grep -vE '^#|^;|^$|^\s' server.conf
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.255.0.0"
route 10.0.0.0 255.255.0.0
client-config-dir ccd
route 192.168.40.128 255.255.255.248
client-config-dir ccd
route 10.9.0.0 255.255.255.0
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 5
$ cat ccd/client1
ifconfig-push 10.9.0.1 10.9.0.2
iroute 10.9.0.1 255.255.255.255
Tags openvpn