On Wed, May 31, 2017 at 3:14 PM, Clouds Flowing <clouds.flowing at gmail.com> wrote: > I've configured ocserv as > > ipv4-network = 172.24.9.0/24 > dns = 172.24.9.1 > route = 172.24.9.0/255.255.255.0 > > and after connected to server, my 2 devices got ip 172.24.9.20 and 172.24.9.21, > I could ping from any of clients to the server (172.24.9.1), and from > the server to any clients, > But I could not successfully ping from one client to another, (e.g. I > could not ping 172.24.9.20 from 172.24.9.21). > > > Is there anything I missed in configuration? You have to debug your local firewall. ocserv doesn't apply any rules to incoming packets, your system's firewall could though.