ArchLinux搭建OpenConnect服务器后客户端无法访问互联网的问题求助

我在ArchLinux的VPS上搭建了OpenConnect服务器，现在Windows客户端能成功连接到服务器，但就是没法访问互联网——ping 8.8.8.8完全不通，不过ping VPN服务器本身是正常的。下面是我操作的相关命令、系统状态和配置信息，麻烦各位帮忙排查下问题出在哪？

我执行的相关操作命令 #

ip tuntap add mode tun dev vpn0
ip addr add 192.168.2.2/24 dev vpn0

# 重启ocserv服务
systemctl restart ocserv

# 设置iptables规则
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 8443 -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

当前网卡状态（ip a输出） #

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute
       valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq state UP group default qlen 1000
    link/ether 56:00:04:c4:b9:c3 brd ff:ff:ff:ff:ff:ff
    inet 66.42.108.48/23 brd 66.42.109.255 scope global dynamic noprefixroute enp1s0
       valid_lft 85512sec preferred_lft 85512sec
    inet6 2001:19f0:6001:5689:5400:4ff:fec4:b9c3/64 scope global dynamic noprefixroute
       valid_lft 2591893sec preferred_lft 604693sec
    inet6 fe80::5400:4ff:fec4:b9c3/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: vpn0: <NO-CARRIER,POINTOPOINT,MULTICAST,NOARP,UP> mtu 1500 qdisc fq state DOWN group default qlen 500
    link/none
    inet 192.168.2.2/24 scope global vpn0
       valid_lft forever preferred_lft forever

IPv4转发配置情况 #

# 查看全局转发状态
sysctl net.ipv4.ip_forward
# 输出：net.ipv4.ip_forward = 1

# 再次确认
sysctl net.ipv4.ip_forward
# 输出：net.ipv4.ip_forward = 1

# 查看所有接口的转发设置
sysctl -a | grep forwarding | grep ipv4
# 输出：
net.ipv4.conf.all.bc_forwarding = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.default.bc_forwarding = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.enp1s0.bc_forwarding = 0
net.ipv4.conf.enp1s0.forwarding = 1
net.ipv4.conf.enp1s0.mc_forwarding = 0
net.ipv4.conf.lo.bc_forwarding = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.vpn0.bc_forwarding = 0
net.ipv4.conf.vpn0.forwarding = 1
net.ipv4.conf.vpn0.mc_forwarding = 0

OpenConnect服务器配置 #

device = vpns0
tcp-port = 8443
ipv4-network = 192.168.2.0/24
route = default

问题总结 #

• Windows客户端能成功连接到Linux VPS上的OpenConnect服务器
• 客户端可以ping通VPN服务器（66.42.108.48）
• 客户端无法访问互联网，ping 8.8.8.8无响应

备注：内容来源于stack exchange，提问作者Dmitry Bubnenkov