I have openvpn server running on my router at using using DD-WRT distribution, everything was working fine when I had winxp on my laptop.
After switching to win7 I noticed that I can't use home network at default gateway anymore checking with
http://www.whatismyip.com but hotel network.
I noticed that in the client windows I get an error message when openvpn trying to push route:
ERROR: Windows route add command failed [adaptive]: returned error code 1
C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.1
ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=23]
Route addition via IPAPI failed [adaptive]
Route addition fallback to route.exe
The requested operation requires elevation.
I decided to start openvpngui as Administrator this time I didn't get the error message any more the the gateway was pushed with incorrect subnet mask.
C:\WINDOWS\system32\route.exe ADD "my home ip address" MASK 255.255.255.255 192.168.72.1
ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Route addition via IPAPI succeeded [adaptive]
C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.1
ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Route addition via IPAPI succeeded [adaptive]
C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.1.1
ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Route addition via IPAPI succeeded [adaptive]
Initialization Sequence Completed
The mask being pushed is 128.0.0.1 instead of 0.0.0.0 why?
My router openvpn server configuration is:
mode server
tls-server
port 1194
#proto udp
proto tcp-server
dev tap0
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
dh /tmp/openvpn/dh.pem
server-bridge 192.168.1.1 255.255.255.0 192.168.1.100 192.168.1.105
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.1.1"
management localhost 5002
client-to-client
daemon
keepalive 10 120
tls-auth /tmp/openvpn/ta.key 0
#cipher AES-256-CBC
cipher BF-CBC
comp-lzo
persist-key
persist-tun
verb 1
My Startup script on the server is
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
My firewall configuration is
iptables -t nat -I PREROUTING -p tcp --dport 1194 -d 192.168.1.1 -j ACCEPT
iptables -I INPUT -p tcp --dport 1194 -j ACCEPT
iptables -t nat -I PREROUTING -p tcp -d `nvram get wan_ipaddr` --dport 1194 -j ACCEPT
Any help will be appreciated
