Ip doesn't change after connected

hanzie

Hello,

I have two computers on same network. One is openvpn server, other One is THE client.
Now you will ask yourself why i wanna connect two computers with openvpn wen they are allready on the same lan.
I do this because i wan't to change the IP from my client so i can acces blocked sites.

I've set up a working connection and server+client can ping each other.
But when i connect to the server the ip from the client didn't change.
I don't understand because the config works when using a remote cOmputer outside the lan as server.

hanzie

This is my server.conf:

port 53
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.19.5.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
push "dhcp-option DNS 8.8.8.8"
status openvpn-status.log
verb 3
client-to-client
gateway/router
push "redirect-gateway def1"
push "route 172.19.5.0 255.255.255.0"
cipher AES-256-CBC

This is my client.conf:

client
dev tun
proto udp
remote xx.249.37.xx 53
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert pc.crt
key pc.key
comp-lzo
verb 3
cipher AES-256-CBC
script-security 3 system

Routing table on server-machine:

172.19.5.2 * 255.255.255.255 UH 0 0 0 tun0
192.168.3.0 * 255.255.255.0 U 2 0 0 ra0
172.19.5.0 172.19.5.2 255.255.255.0 UG 0 0 0 tun0
link-local * 255.255.0.0 U 1000 0 0 ra0
default 192.168.3.1 0.0.0.0 UG 0 0 0 ra0

192.168.3.1 is the gateway to my linksys router.

So i can see with traceroute that the client internet-traffic is going trough the server (first hop).
The client gets the public ip from the server, BUT, it doesn get the ip i push in my server config file:
172.19.5.0/24

Why not?

janjust

in your setup the client would be assigned the first available IP address from the pool, which would be 172.19.5.6 ; you can overrule this using a CCD file or using a client-connect script. Read the HOWTO page on the openvpn site for more details:
http://openvpn.net/index.php/open-source/documentation/howto.html#policy

hanzie

Hello,

I also would think it should assign 172.19.5.6 to the client.
But it does not!

It assigns the public IP from my server to the client?!

Why?

janjust

how did you check this? what does 'ifconfig -a' (Linux/MacOS) or 'ipconfig /all' (Windows) give?

if you browse to sites likes whatsmyip.com you most likely WILL see the server public IP - that's how masquerading/routing traffic over a VPN usually works.

hanzie

Hello,

I checked now with ipconfig /all
Ip is indeed 172.19.5.6.

Whatsmyip.nl says xx.31.xxx.39 (my public ip)

Why the difference, i don't understand :roll:

I wan't the browser to display 172.19.5.6 so i can visit blocked sites like tpb.

hanzie

I understand it now!

Vertixo explained it! THNX