demiart967 Hello, I need to connect two networks using OpenVPN, one side is Server2008R2 (TS2) and the other is the Win7Prof (sollexpc) acts as a server, while Server2008R2 (TS2) PC acts as a client. I would like a client to have permanent IP 10.0.0.10 but every time client gets 10.0.0.6 IP and seems its ignoring ipp.txt and setting file in ccd directory, what is wrong in my setup? Also I would like PCs behind Openvpn client and server to see each other, but at list i need to solve a question assigning specified IP. Currently client is able to connect to server, and i can ping both sides 10.0.0.6 from the server and 10.0.0.1 from client. lan map: sollexpc pc LAN IP 192.168.0.5 (gateway 192.168.0.2 dns 192.168.0.2) router IP 192.168.0.2 ext ip 95.31.x.x TS2 pc LAN IP 192.168.137.2 (gateway 192.168.137.100 dns 192.168.137.100) router IP 192.168.137.100 ext ip 79.142.x.x for the server, my config is the following: dev tun proto tcp-server port 8888 tls-server server 10.0.0.0 255.255.255.0 comp-lzo push "route 192.168.0.0 255.255.0.0" client-to-client client-config-dir C:\\OpenVPN\\ccd ifconfig-pool-persist C:\\OpenVPN\\ccd\\ipp.txt dh C:\\OpenVPN\\ssl\\dh1024.pem ca C:\\OpenVPN\\ssl\\ca.crt cert C:\\OpenVPN\\ssl\\sollexpc.crt key C:\\OpenVPN\\ssl\\sollexpc.key persist-tun persist-key tls-auth C:\\OpenVPN\\ssl\\ta.key 0 tun-mtu 1500 tun-mtu-extra 32 mssfix 1450 keepalive 10 120 status C:\\OpenVPN\\log\\openvpn-status.log log C:\\OpenVPN\\log\\openvpn.log verb 3 If I put a following to ccd directory: there is a file named "TS2" at the server ccd directory, which contains: ifconfig-push 10.0.0.10 10.0.0.9 there is a file named "ipp.txt" at the server ccd directory, which contains: TS2,10.0.0.10 connection is up, but no ping is possible ... for client dev tun proto tcp remote 95.31.x.x 8888 route-delay 3 client tls-client ns-cert-type server ca C:\\OpenVPN\\ssl\\ca.crt cert C:\\OpenVPN\\ssl\\ts2.crt key C:\\OpenVPN\\ssl\\ts2.key tls-auth C:\\OpenVPN\\ssl\\ta.key 1 comp-lzo tun-mtu 1500 tun-mtu-extra 32 mssfix 1450 ping-restart 60 ping 10 status C:\\OpenVPN\\log\\openvpn-status.log log C:\\OpenVPN\\log\\openvpn.log verb 3
maikcat to check if ccd filename & cert matches give: openssl x509 -subject -noout -in ts2.crt check the CN field if it is ts2 Michael.
demiart967 openssl returns the following information: c:\OpenVPN\easy-rsa>openssl x509 -subject -noout -in c:\\openvpn\\ssl\\ts2.crt subject= /C=RU/ST=Spb/L=SPb/O=TDF/OU=TS2/CN=TS2/name=changeme/emailAddress=info@mydomain.ru
maikcat is the filename of ccd file is TS2? (no extension) can you use verb 5 on server and post log here? Michael.
demiart967 It seems I had to restart my OpenVPN client PC at least once while applying new settings. Now, clients are receiving the IP adresses correctly, I have turned off TAP adapter, turned off service, after that turned on TAP adapter and Turned on service, after doing this, the client TAP adapter showed it has received IP as it should. At the log there were a strings: Tue May 08 18:16:00 2012 us=980000 79.142.xx:63850 [TS2] Peer Connection Initiated with 79.142.xx:63850 Tue May 08 18:16:00 2012 us=980000 TS2/79.142.xx:63850 OPTIONS IMPORT: reading client specific options from: C:\OpenVPN\ccd\TS2 Tue May 08 18:16:00 2012 us=980000 TS2/79.142.xx:63850 MULTI: Learn: 10.0.0.10 -> TS2/79.142.xx:63850 Tue May 08 18:16:00 2012 us=980000 TS2/79.142.xx:63850 MULTI: primary virtual IP for TS2/79.142.xx:63850: 10.0.0.10 Tue May 08 18:16:00 2012 us=980000 TS2/79.142.xx:63850 MULTI: internal route 192.168.137.0/24 -> TS2/79.142.xx:63850 Tue May 08 18:16:00 2012 us=980000 TS2/79.142.xx:63850 MULTI: Learn: 192.168.137.0/24 -> TS2/79.142.xx:63850 and even after that, the tap adapter was still displaying 10.0.0.6 adress, I thought could be something wrong on client side, and enabled/disabled service and adapter. Now it works 😛
