I have an Amazon Virtual Private Cloud that looks like this:
10.40.1.1 Internet Gateway 10.40.1.5 My OpenVPN Instance 10.40.1.100 My Windows Box
What I want is traffic from the Windows box destined for network 10.200.1.0 to route through my OpenVPN Instance (10.40.1.5), but for the life of me I cannot make it go.
The Windows Box can ping the OpenVPN Instance. The subnet and instances have appropriate firewall rules.
To test routing I run "ping 10.200.1.123" from the Windows box and watch the output of tcpdump on the OpenVPN Instance. This technique works on my local physical LAN.
To the VPC route table I added a route for 10.200.1.0/24 to go to the OpenVPN Instance, but they never arrive.
On the Windows box I tried adding the same route. Using wireshark I verified that ping packets are destined to the OpenVPN Instance's MAC address. But no cigar.
Do VPC subnets even allow this kind of routing?