Set Windows 10 TAP adaptor to private network

[nickh]

Hi,

I've just deployed OpenVPN on a Win10 box to my aged mother who previously had an XP box. In Win10 the box does not want to respond to pings through the VPN or even on the LAN. I can fix the LAN by allowing the relevant firewall rule for private networks. Unfortunately the Windows TAP adaptor is defined as an Unknown network and I can't find out how to set it to a Private network. For the moment I've set a firewall rule to allow everything from the OpenVPN subnet, but I'd rather disable the rule and just classify the OpenVPN subnet as private.

Is this possible, and, if so, how?

TIA,

Nick

[Traffic]

For the moment I've set a firewall rule to allow everything from the OpenVPN subnet

This is exactly what I do ..

but I'd rather disable the rule and just classify the OpenVPN subnet as private

The problem is Windows .. It only allows you to classify a network as private if it has an associated default gateway (i think .. not 100% sure what windows is upto) and you cannot have two default gateways .. well you can but then things go very peculiar.

[nickh]

Pity. It would make configuration a lot more foolproof, and safer in the case that the roadwarrior happens to connect to a subnet which is the same as your server's LAN subnet. Then no traffic will go down the tunnel and the machine will be totally open to anyone on that subnet.

[Traffic]

Considering the range of RFC1918 available subnets, a properly configured system is extremely unlikely to have such a conflict.

[nickh]

Agreed. That is why I've picked on something in the 172.16/12 range It is just that if Micro$oft allowed it, it could be made even safer.

[DavidJacobs]

Hi,

Having the same issue I was able to make the TAP adapter private by pushing a default gateway to it.
Now being able to ping from client to server and vice verse.

push "route-metric 512"
push "route 0.0.0.0 0.0.0.0"

[ubermudr]

into server config file or client config file?

[nikolaiortiz]

Hi,
I can made ping from server to client and vice versa but I can't see the shared Files ..
I disable the firewall for the TAP adapter in the client and the server.

Thanks ...

[nickh]

Please make your own thread and give more information about your set up like operating systems and so on. Also how you are trying to "see" the files?

[TinCanTech]

@nickh .. thanks for your help

Having the same issue I was able to make the TAP adapter private by pushing a default gateway to it.
Now being able to ping from client to server and vice verse.

push "route-metric 512"
push "route 0.0.0.0 0.0.0.0"

into server config file or client config file?

You push from the server ..

This thread should be closed.