VPN when host is not gateway

[Nate Nielsen]

Tiago Cruz wrote:
> If I install the VPN in my gateway (192.168.0.1), the laptop client host
> (Windows XP) is able to ping my virtual server (10.8.0.1), my gateway
> (192.168.0.1) and all my LAN (192.168.0.0/22).
> 
> If I install the VPN in my gateway backup (192.168.0.253, with CARP),
> the laptop client is able to ping my virtual server (10.8.0.1), my
> gateway (192.168.0.1) but NOT is able to ping my LAN (192.168.0.0/22).
> 
> I think that is missing some route, and because this I go to get some
> tip...

I'd use tcpdump on the various interfaces (tap devices, ethernet) on the
machines in question to see exactly at which host is not forwarding the
packets properly and where they're going.

Cheers,
Nate