[vpn] 搞了半个月的openvpn两个网络互联，还是不行快崩馈拉，大家看看啊

[weixin_38059644]

如图所示两台位于不同地方不同网段的两台网关上装的openvpn,一端设为server一端为client并用ca证书的方式：
现在的情况是client端的192.168.1.1可以ping通192.168.0.1
但是为什么在server端192.168.0.1不可以ping通192.168.1.1啊？
另外说明两边的10.8.0.x的ip可以互相ping通的。
server.conf:
#############
;local a.b.c.d
port 1194
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
crl-verify vpncrl.pem
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
push "route 192.168.0.0 255.255.255.0"
route 192.168.1.0 255.255.255.0
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway"
;push "dhcp-option DNS 10.8.0.1"
;push "dhcp-option WINS 10.8.0.1"
client-to-client
push "route 192.168.1.0 255.255.255.0"
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES
comp-lzo
;max-clients 100
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
;log         openvpn.log
;log-append  openvpn.log
verb 9
;mute 20
#############
client.conf
#################
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote  202.109.xxx.xxx 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca ca.crt
cert abc.crt
key abc.key
push "route 192.168.0.0 255.255.255.0"
route 192.168.0.0 255.255.255.0
ns-cert-type server
tls-auth ta.key 1
;cipher x
comp-lzo
verb 9
;mute 20

这是为什么啊要，
另外我的目的是实现两地就像两个vlan一样可以互访问，还要做什么啊？
请大家帮一下啊 [ 本帖最后由 bjhb 于 2006-5-12 15:55 编辑 ]