On 10.04.19 12:29, Wolfgang Dautermann wrote: > 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 > > The last entry seems to be okay - I think? On the second client it is > similar. Oh, it seems I found the problem. I wanted to enable internet for the clients too and that seems, that the iptables rule blocked the connection between the clients (or did the routing wrong...) Is there an easy way to allow connections between the clients *and* allow them internet? The standard masquerading rule iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j SNAT \ --to-source <my-default-gateway> does not seem to be right. Best regards, Wolfgang _______________________________________________ openconnect-devel mailing list openconnect-devel@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/openconnect-devel