Windows Server 2008 R2 not routing

hecstevez

Hello, I have the next issue: Clients can connect to the server, but they cannot ping any other computer except server's tap interface and server's lan interface. A curious thing is that any computer inside the lan can ping any connected vpn client but, as I already said, a connected vpn client cannot ping those computers.

Im running Openvpn 2.2.2, Server is running on Windows server 2008 R2 64 bits.

It looks to me that it is a routing issue on the server. I started the services in the correct order: First Openvpn service, then Routing and remote access later.

My lan ip is 172.16.16.0 255.255.255.0

These are my config files:

Server:

port 1194

proto udp

dev tun

ca ca.crt

cert VPN.crt

key VPN.key

dh dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "redirect-gateway def1 bypass-dhcp"

push "dhcp-option DNS 172.16.16.254"

keepalive 10 120

comp-lzo

persist-key

persist-tun

status openvpn-status.log

verb 3

Client:

client

dev tun

proto udp

remote 200.109.*.* 1194

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

cert client.key.crt

key client.key

ns-cert-type server

comp-lzo

verb 3

Server ip table

===========================================================================
ILista de interfaces
14...00 ff 93 ad b1 22 ......TAP-Win32 Adapter V9
11...00 0c 29 95 6c a4 ......Conexión de red Intel(R) PRO/1000 MT
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Adaptador ISATAP de Microsoft
13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
15...00 00 00 00 00 00 00 e0 Adaptador ISATAP de Microsoft #2
===========================================================================

IPv4 Tabla de enrutamiento
===========================================================================
Rutas activas:
Destino de red Máscara de red Puerta de enlace Interfaz Métrica
0.0.0.0 0.0.0.0 172.16.16.254 172.16.16.124 10
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 30
10.8.0.0 255.255.255.252 En vínculo 10.8.0.1 286
10.8.0.1 255.255.255.255 En vínculo 10.8.0.1 286
10.8.0.3 255.255.255.255 En vínculo 10.8.0.1 286
172.16.16.0 255.255.255.0 En vínculo 172.16.16.124 266
172.16.16.124 255.255.255.255 En vínculo 172.16.16.124 266
172.16.16.255 255.255.255.255 En vínculo 172.16.16.124 266
224.0.0.0 240.0.0.0 En vínculo 172.16.16.124 266
255.255.255.255 255.255.255.255 En vínculo 172.16.16.124 266
===========================================================================
Rutas persistentes:
Ninguno

Log does'nt show any error.

any suggestion? Thank you

Mimiko

A curious thing is that any computer inside the lan can ping any connected vpn client but, as I already said, a connected vpn client cannot ping those computers.

If this is working than windows routes and forwards packets correctly. You have to see if the lan's computers does not have firewall enabled. And see on each involved part the routing table with route print.