Hi all, I am trying to setup Tunnel between two WIN7 Internet machine both having Public WAN IP for last 5 days. Just tried . Can you Please help. Not able to find out what mistake there Openvpn 2.2.2 Server - Windows 7 64 Bit - No Home router - IP - 172.99.171.151 Globally accessible . Openvpn 2.2.2 Client - Windows7 32 Bit - No Home router - IP - 99.203.209.33 Globally accessible . Both are connected via different ISP t Internet and dont have any LAN setup. I neither can PING nor I can Browse pages through Tunnel. But Connection Successful I disabled Both firewalls . Here is all required Files. [b]CLIENT [/b]= > WINDOWS 7 32 Bit - Openvpn 2.2.2 IP - > 99.203.209.33 [b]Client LOG[/b] ================= [code] Fri May 11 00:11:56 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011 Fri May 11 00:11:56 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Fri May 11 00:11:56 2012 ******* WARNING *******: null cipher specified, no encryption will be used Fri May 11 00:11:56 2012 ******* WARNING *******: null MAC specified, no authentication will be used Fri May 11 00:11:56 2012 Control Channel MTU parms [ L:1505 D:138 EF:38 EB:0 ET:0 EL:0 ] Fri May 11 00:11:56 2012 Socket Buffers: R=[8192->8192] S=[8192->8192] Fri May 11 00:11:56 2012 Data Channel MTU parms [ L:1505 D:1450 EF:5 EB:4 ET:0 EL:0 AF:14/5 ] Fri May 11 00:11:56 2012 Local Options hash (VER=V4): '8abebca0' Fri May 11 00:11:56 2012 Expected Remote Options hash (VER=V4): '245fc614' Fri May 11 00:11:56 2012 UDPv4 link local: [undef] Fri May 11 00:11:56 2012 UDPv4 link remote: 172.99.171.151:4434 Fri May 11 00:11:58 2012 TLS: Initial packet from 172.99.171.151:4434, sid=1b6c8ea0 7fdf126f Fri May 11 00:12:00 2012 VERIFY OK: depth=1, /C=IN/ST=IN/L=IN/O=TunnelGuru/OU=TUN/CN=TunnelGuru.com/name=tunnelguru/emailAddress=contact@tunnelguru.com Fri May 11 00:12:00 2012 VERIFY OK: nsCertType=SERVER Fri May 11 00:12:00 2012 VERIFY OK: depth=0, /C=IN/ST=IN/L=IN/O=TunnelGuru/OU=TUN/CN=TunnelGuru.com/name=tunnelguru/emailAddress=contact@tunnelguru.com Fri May 11 00:12:02 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Fri May 11 00:12:02 2012 [TunnelGuru.com] Peer Connection Initiated with 172.99.171.151:4434 Fri May 11 00:12:05 2012 SENT CONTROL [TunnelGuru.com]: 'PUSH_REQUEST' (status=1) Fri May 11 00:12:05 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' Fri May 11 00:12:05 2012 OPTIONS IMPORT: timers and/or timeouts modified Fri May 11 00:12:05 2012 OPTIONS IMPORT: --ifconfig/up options modified Fri May 11 00:12:05 2012 OPTIONS IMPORT: route options modified Fri May 11 00:12:05 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Fri May 11 00:12:05 2012 ROUTE default_gateway=99.203.209.33 Fri May 11 00:12:05 2012 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{41D40E5B-2639-4DDC-A1A2-2DFBE962F09A}.tap Fri May 11 00:12:05 2012 TAP-Win32 Driver Version 9.9 Fri May 11 00:12:05 2012 TAP-Win32 MTU=1500 Fri May 11 00:12:05 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {41D40E5B-2639-4DDC-A1A2-2DFBE962F09A} [DHCP-serv: 10.8.0.5, lease-time: 31536000] Fri May 11 00:12:05 2012 Successful ARP Flush on interface [47] {41D40E5B-2639-4DDC-A1A2-2DFBE962F09A} Fri May 11 00:12:10 2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 172.99.171.151 MASK 255.255.255.255 99.203.209.33 Fri May 11 00:12:10 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4 Fri May 11 00:12:10 2012 Route addition via IPAPI succeeded [adaptive] Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5 Fri May 11 00:12:10 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=47] Fri May 11 00:12:10 2012 Route addition via IPAPI failed [adaptive] Fri May 11 00:12:10 2012 Route addition fallback to route.exe OK! Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5 Fri May 11 00:12:10 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=47] Fri May 11 00:12:10 2012 Route addition via IPAPI failed [adaptive] Fri May 11 00:12:10 2012 Route addition fallback to route.exe OK! Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5 Fri May 11 00:12:10 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=47] Fri May 11 00:12:10 2012 Route addition via IPAPI failed [adaptive] Fri May 11 00:12:10 2012 Route addition fallback to route.exe OK! Fri May 11 00:12:10 2012 Initialization Sequence Completed [/code] [b]Client Config[/b] ================== [code] client dev tun proto udp remote 172.99.171.151 4434 resolv-retry infinite nobind persist-key persist-tun #auth-nocache ns-cert-type server #comp-lzo verb 3 reneg-sec 28800 ca "C:\\key\\ca.crt" cert "C:\\key\\myclient.crt" key "C:\\key\\myclient.key" auth none cipher none [/code] [b]Client IPv4 Route Table Before OPenvpn run :[/b] ====================================== [code] Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 On-link 99.203.209.33 41 99.203.209.33 255.255.255.255 On-link 99.203.209.33 296 224.0.0.0 240.0.0.0 On-link 99.203.209.33 41 255.255.255.255 255.255.255.255 On-link 99.203.209.33 296 Persistent Routes: None [/code] [b]Client IPv4 Route Table after OPenvpn run :[/b] ================================== [code] Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 On-link 99.203.209.33 41 0.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 4256 10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 4256 10.8.0.4 255.255.255.252 On-link 10.8.0.6 4511 10.8.0.6 255.255.255.255 On-link 10.8.0.6 4511 10.8.0.7 255.255.255.255 On-link 10.8.0.6 4511 172.99.171.151 255.255.255.255 On-link 99.203.209.33 40 99.203.209.33 255.255.255.255 On-link 99.203.209.33 296 128.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 4256 224.0.0.0 240.0.0.0 On-link 99.203.209.33 41 255.255.255.255 255.255.255.255 On-link 99.203.209.33 296 Persistent Routes: None [/code] ====================== SERVER =========================== [b]server[/b]= > WINDOWS 7 64 Bit - Openvpn 2.2.2 IP - > 172.99.171.151 [b]SErver LOG[/b] ========== [code] Fri May 11 00:10:41 2012 us=249000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011 Fri May 11 00:10:41 2012 us=249000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Fri May 11 00:10:41 2012 us=420000 Diffie-Hellman initialized with 1024 bit key Fri May 11 00:10:41 2012 us=420000 ******* WARNING *******: null cipher specified, no encryption will be used Fri May 11 00:10:41 2012 us=420000 ******* WARNING *******: null MAC specified, no authentication will be used Fri May 11 00:10:41 2012 us=420000 TLS-Auth MTU parms [ L:1505 D:138 EF:38 EB:0 ET:0 EL:0 ] Fri May 11 00:10:41 2012 us=436000 Socket Buffers: R=[8192->8192] S=[8192->8192] Fri May 11 00:10:41 2012 us=436000 ROUTE default_gateway=172.99.171.151 Fri May 11 00:10:41 2012 us=436000 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{1EDAA50E-5C00-47F1-8225-BB91C74B572D}.tap Fri May 11 00:10:41 2012 us=436000 TAP-Win32 Driver Version 9.9 Fri May 11 00:10:41 2012 us=436000 TAP-Win32 MTU=1500 Fri May 11 00:10:41 2012 us=436000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {1EDAA50E-5C00-47F1-8225-BB91C74B572D} [DHCP-serv: 10.8.0.2, lease-time: 31536000] Fri May 11 00:10:41 2012 us=436000 Sleeping for 10 seconds... Fri May 11 00:10:51 2012 us=436000 Successful ARP Flush on interface [20] {1EDAA50E-5C00-47F1-8225-BB91C74B572D} Fri May 11 00:10:51 2012 us=451000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2 Fri May 11 00:10:51 2012 us=483000 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=20] Fri May 11 00:10:51 2012 us=483000 Route addition via IPAPI failed [adaptive] Fri May 11 00:10:51 2012 us=483000 Route addition fallback to route.exe OK! Fri May 11 00:10:51 2012 us=498000 Data Channel MTU parms [ L:1505 D:1450 EF:5 EB:4 ET:0 EL:0 AF:14/5 ] Fri May 11 00:10:51 2012 us=498000 UDPv4 link local (bound): 172.99.171.151:4434 Fri May 11 00:10:51 2012 us=498000 UDPv4 link remote: [undef] Fri May 11 00:10:51 2012 us=498000 MULTI: multi_init called, r=256 v=256 Fri May 11 00:10:51 2012 us=498000 IFCONFIG POOL: base=10.8.0.4 size=62 Fri May 11 00:10:51 2012 us=498000 IFCONFIG POOL LIST Fri May 11 00:10:51 2012 us=498000 NO,10.8.0.4 Fri May 11 00:10:51 2012 us=498000 Initialization Sequence Completed Fri May 11 00:10:51 2012 us=498000 IPv6 in tun mode is not supported in OpenVPN 2.2 Fri May 11 00:12:04 2012 us=397000 MULTI: multi_create_instance called Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Re-using SSL/TLS context Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Control Channel MTU parms [ L:1505 D:138 EF:38 EB:0 ET:0 EL:0 ] Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Data Channel MTU parms [ L:1505 D:1450 EF:5 EB:4 ET:0 EL:0 AF:14/5 ] Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Local Options String: 'V4,dev-type tun,link-mtu 1505,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth [null-digest],keysize 0,key-method 2,tls-server' Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1505,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth [null-digest],keysize 0,key-method 2,tls-client' Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Local Options hash (VER=V4): '245fc614' Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Expected Remote Options hash (VER=V4): '8abebca0' Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 TLS: Initial packet from 99.203.209.33:57063, sid=65600c91 a594a3ff Fri May 11 00:12:07 2012 us=237000 99.203.209.33:57063 VERIFY OK: depth=1, /C=IN/ST=IN/L=IN/O=TunnelGuru/OU=TUN/CN=TunnelGuru.com/name=tunnelguru/emailAddress=contact@tunnelguru.com Fri May 11 00:12:07 2012 us=237000 99.203.209.33:57063 VERIFY OK: depth=0, /C=CA/ST=CA/L=CA/O=noname/OU=NO/CN=NO/name=myclient/emailAddress=no@nothing Fri May 11 00:12:08 2012 us=329000 99.203.209.33:57063 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Fri May 11 00:12:08 2012 us=329000 99.203.209.33:57063 [NO] Peer Connection Initiated with 99.203.209.33:57063 Fri May 11 00:12:08 2012 us=329000 NO/99.203.209.33:57063 MULTI: Learn: 10.8.0.6 -> NO/99.203.209.33:57063 Fri May 11 00:12:08 2012 us=329000 NO/99.203.209.33:57063 MULTI: primary virtual IP for NO/99.203.209.33:57063: 10.8.0.6 Fri May 11 00:12:10 2012 us=809000 NO/99.203.209.33:57063 PUSH: Received control message: 'PUSH_REQUEST' Fri May 11 00:12:10 2012 us=809000 NO/99.203.209.33:57063 SENT CONTROL [NO]: 'PUSH_REPLY,redirect-gateway def1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 1 20,ifconfig 10.8.0.6 10.8.0.5' (status=1) [/code] [b]Server Config[/b] ======== [code] local 172.99.171.151 # This is the IP address of the real network interface on the server connected to the router port 4434 proto udp dev tun ca "C:\\key\\ca.crt" cert "C:\\key\\server.crt" key "C:\\key\\server.key" # This file should be kept secret dh "C:\\key\\dh1024.pem" server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1" push "redirect-gateway def1 bypass-dhcp" #push "dhcp-option DNS 10.8.0.1" push "dhcp-option DNS 8.8.8.8" keepalive 10 120 #comp-lzo persist-key persist-tun status openvpn-status.log verb 4 script-security 3 auth none cipher none [/code] [b]Server IPv4 Route Table - Before Openvpn starts[/b] =================================== [code] Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 On-link 172.99.171.151 41 172.99.171.151 255.255.255.255 On-link 172.99.171.151 296 224.0.0.0 240.0.0.0 On-link 172.99.171.151 41 255.255.255.255 255.255.255.255 On-link 172.99.171.151 296 Persistent Routes: None [/code] Server IPv4 Route Table - after Openvpn starts ==================================== [code] Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 On-link 172.99.171.151 41 10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 4256 10.8.0.0 255.255.255.252 On-link 10.8.0.1 4511 10.8.0.1 255.255.255.255 On-link 10.8.0.1 4511 10.8.0.3 255.255.255.255 On-link 10.8.0.1 4511 172.99.171.151 255.255.255.255 On-link 172.99.171.151 296 224.0.0.0 240.0.0.0 On-link 172.99.171.151 41 255.255.255.255 255.255.255.255 On-link 172.99.171.151 296 Persistent Routes: None [/code] ==== Note : Original IP changed to dummy for both client and server. Pls help me Thanks pada

Tunnel between two WIN7 machine both having Public WAN IP

pada123

Hi all,
I am trying to setup Tunnel between two WIN7 Internet machine both having Public WAN IP for last 5 days.
Just tried . Can you Please help. Not able to find out what mistake there

Openvpn 2.2.2 Server - Windows 7 64 Bit - No Home router - IP - 172.99.171.151 Globally accessible .
Openvpn 2.2.2 Client - Windows7 32 Bit - No Home router - IP - 99.203.209.33 Globally accessible .

Both are connected via different ISP t Internet and dont have any LAN setup.

I neither can PING nor I can Browse pages through Tunnel. But Connection Successful
I disabled Both firewalls .

Here is all required Files.

CLIENT = > WINDOWS 7 32 Bit - Openvpn 2.2.2
IP - > 99.203.209.33

Client LOG
=================



Fri May 11 00:11:56 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Fri May 11 00:11:56 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 11 00:11:56 2012 ******* WARNING *******: null cipher specified, no encryption will be used
Fri May 11 00:11:56 2012 ******* WARNING *******: null MAC specified, no authentication will be used
Fri May 11 00:11:56 2012 Control Channel MTU parms [ L:1505 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 11 00:11:56 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 11 00:11:56 2012 Data Channel MTU parms [ L:1505 D:1450 EF:5 EB:4 ET:0 EL:0 AF:14/5 ]
Fri May 11 00:11:56 2012 Local Options hash (VER=V4): '8abebca0'
Fri May 11 00:11:56 2012 Expected Remote Options hash (VER=V4): '245fc614'
Fri May 11 00:11:56 2012 UDPv4 link local: [undef]
Fri May 11 00:11:56 2012 UDPv4 link remote: 172.99.171.151:4434
Fri May 11 00:11:58 2012 TLS: Initial packet from 172.99.171.151:4434, sid=1b6c8ea0 7fdf126f
Fri May 11 00:12:00 2012 VERIFY OK: depth=1, /C=IN/ST=IN/L=IN/O=TunnelGuru/OU=TUN/CN=TunnelGuru.com/name=tunnelguru/emailAddress=contact@tunnelguru.com
Fri May 11 00:12:00 2012 VERIFY OK: nsCertType=SERVER
Fri May 11 00:12:00 2012 VERIFY OK: depth=0, /C=IN/ST=IN/L=IN/O=TunnelGuru/OU=TUN/CN=TunnelGuru.com/name=tunnelguru/emailAddress=contact@tunnelguru.com
Fri May 11 00:12:02 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 11 00:12:02 2012 [TunnelGuru.com] Peer Connection Initiated with 172.99.171.151:4434
Fri May 11 00:12:05 2012 SENT CONTROL [TunnelGuru.com]: 'PUSH_REQUEST' (status=1)
Fri May 11 00:12:05 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Fri May 11 00:12:05 2012 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 11 00:12:05 2012 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 11 00:12:05 2012 OPTIONS IMPORT: route options modified
Fri May 11 00:12:05 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 11 00:12:05 2012 ROUTE default_gateway=99.203.209.33
Fri May 11 00:12:05 2012 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{41D40E5B-2639-4DDC-A1A2-2DFBE962F09A}.tap
Fri May 11 00:12:05 2012 TAP-Win32 Driver Version 9.9
Fri May 11 00:12:05 2012 TAP-Win32 MTU=1500
Fri May 11 00:12:05 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {41D40E5B-2639-4DDC-A1A2-2DFBE962F09A} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri May 11 00:12:05 2012 Successful ARP Flush on interface [47] {41D40E5B-2639-4DDC-A1A2-2DFBE962F09A}
Fri May 11 00:12:10 2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 172.99.171.151 MASK 255.255.255.255 99.203.209.33
Fri May 11 00:12:10 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4
Fri May 11 00:12:10 2012 Route addition via IPAPI succeeded [adaptive]
Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri May 11 00:12:10 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct.   [status=160 if_index=47]
Fri May 11 00:12:10 2012 Route addition via IPAPI failed [adaptive]
Fri May 11 00:12:10 2012 Route addition fallback to route.exe
 OK!
Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri May 11 00:12:10 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct.   [status=160 if_index=47]
Fri May 11 00:12:10 2012 Route addition via IPAPI failed [adaptive]
Fri May 11 00:12:10 2012 Route addition fallback to route.exe
 OK!
Fri May 11 00:12:10 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Fri May 11 00:12:10 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct.   [status=160 if_index=47]
Fri May 11 00:12:10 2012 Route addition via IPAPI failed [adaptive]
Fri May 11 00:12:10 2012 Route addition fallback to route.exe
 OK!
Fri May 11 00:12:10 2012 Initialization Sequence Completed

Client Config
==================



client
dev tun
proto udp
remote 172.99.171.151 4434
resolv-retry infinite
nobind
persist-key
persist-tun


#auth-nocache
ns-cert-type server
#comp-lzo
verb 3
reneg-sec 28800

ca "C:\\key\\ca.crt"

cert "C:\\key\\myclient.crt" 

key "C:\\key\\myclient.key"  

auth none
cipher none

Client IPv4 Route Table Before OPenvpn run :
======================================

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         On-link    99.203.209.33     41
   99.203.209.33  255.255.255.255         On-link    99.203.209.33    296
        224.0.0.0        240.0.0.0         On-link    99.203.209.33     41
  255.255.255.255  255.255.255.255         On-link    99.203.209.33    296

Persistent Routes:
  None

Client IPv4 Route Table after OPenvpn run :
==================================

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         On-link    99.203.209.33     41
          0.0.0.0        128.0.0.0         10.8.0.5         10.8.0.6   4256
         10.8.0.1  255.255.255.255         10.8.0.5         10.8.0.6   4256
         10.8.0.4  255.255.255.252         On-link          10.8.0.6   4511
         10.8.0.6  255.255.255.255         On-link          10.8.0.6   4511
         10.8.0.7  255.255.255.255         On-link          10.8.0.6   4511
    172.99.171.151  255.255.255.255         On-link    99.203.209.33     40
   99.203.209.33  255.255.255.255         On-link    99.203.209.33    296
        128.0.0.0        128.0.0.0         10.8.0.5         10.8.0.6   4256
        224.0.0.0        240.0.0.0         On-link    99.203.209.33     41
  255.255.255.255  255.255.255.255         On-link    99.203.209.33    296

Persistent Routes:
  None

====================== SERVER ===========================

server= > WINDOWS 7 64 Bit - Openvpn 2.2.2
IP - > 172.99.171.151

SErver LOG
==========


Fri May 11 00:10:41 2012 us=249000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Fri May 11 00:10:41 2012 us=249000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 11 00:10:41 2012 us=420000 Diffie-Hellman initialized with 1024 bit key
Fri May 11 00:10:41 2012 us=420000 ******* WARNING *******: null cipher specified, no encryption will be used
Fri May 11 00:10:41 2012 us=420000 ******* WARNING *******: null MAC specified, no authentication will be used
Fri May 11 00:10:41 2012 us=420000 TLS-Auth MTU parms [ L:1505 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 11 00:10:41 2012 us=436000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 11 00:10:41 2012 us=436000 ROUTE default_gateway=172.99.171.151
Fri May 11 00:10:41 2012 us=436000 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{1EDAA50E-5C00-47F1-8225-BB91C74B572D}.tap
Fri May 11 00:10:41 2012 us=436000 TAP-Win32 Driver Version 9.9
Fri May 11 00:10:41 2012 us=436000 TAP-Win32 MTU=1500
Fri May 11 00:10:41 2012 us=436000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {1EDAA50E-5C00-47F1-8225-BB91C74B572D} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Fri May 11 00:10:41 2012 us=436000 Sleeping for 10 seconds...
Fri May 11 00:10:51 2012 us=436000 Successful ARP Flush on interface [20] {1EDAA50E-5C00-47F1-8225-BB91C74B572D}
Fri May 11 00:10:51 2012 us=451000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Fri May 11 00:10:51 2012 us=483000 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct.   [status=160 if_index=20]
Fri May 11 00:10:51 2012 us=483000 Route addition via IPAPI failed [adaptive]
Fri May 11 00:10:51 2012 us=483000 Route addition fallback to route.exe
 OK!
Fri May 11 00:10:51 2012 us=498000 Data Channel MTU parms [ L:1505 D:1450 EF:5 EB:4 ET:0 EL:0 AF:14/5 ]
Fri May 11 00:10:51 2012 us=498000 UDPv4 link local (bound): 172.99.171.151:4434
Fri May 11 00:10:51 2012 us=498000 UDPv4 link remote: [undef]
Fri May 11 00:10:51 2012 us=498000 MULTI: multi_init called, r=256 v=256
Fri May 11 00:10:51 2012 us=498000 IFCONFIG POOL: base=10.8.0.4 size=62
Fri May 11 00:10:51 2012 us=498000 IFCONFIG POOL LIST
Fri May 11 00:10:51 2012 us=498000 NO,10.8.0.4
Fri May 11 00:10:51 2012 us=498000 Initialization Sequence Completed
Fri May 11 00:10:51 2012 us=498000 IPv6 in tun mode is not supported in OpenVPN 2.2
Fri May 11 00:12:04 2012 us=397000 MULTI: multi_create_instance called
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Re-using SSL/TLS context
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Control Channel MTU parms [ L:1505 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Data Channel MTU parms [ L:1505 D:1450 EF:5 EB:4 ET:0 EL:0 AF:14/5 ]
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Local Options String: 'V4,dev-type tun,link-mtu 1505,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth [null-digest],keysize 0,key-method 2,tls-server'
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1505,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth [null-digest],keysize 0,key-method 2,tls-client'
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Local Options hash (VER=V4): '245fc614'
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 Expected Remote Options hash (VER=V4): '8abebca0'
Fri May 11 00:12:04 2012 us=397000 99.203.209.33:57063 TLS: Initial packet from 99.203.209.33:57063, sid=65600c91 a594a3ff
Fri May 11 00:12:07 2012 us=237000 99.203.209.33:57063 VERIFY OK: depth=1, /C=IN/ST=IN/L=IN/O=TunnelGuru/OU=TUN/CN=TunnelGuru.com/name=tunnelguru/emailAddress=contact@tunnelguru.com
Fri May 11 00:12:07 2012 us=237000 99.203.209.33:57063 VERIFY OK: depth=0, /C=CA/ST=CA/L=CA/O=noname/OU=NO/CN=NO/name=myclient/emailAddress=no@nothing
Fri May 11 00:12:08 2012 us=329000 99.203.209.33:57063 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 11 00:12:08 2012 us=329000 99.203.209.33:57063 [NO] Peer Connection Initiated with 99.203.209.33:57063
Fri May 11 00:12:08 2012 us=329000 NO/99.203.209.33:57063 MULTI: Learn: 10.8.0.6 -> NO/99.203.209.33:57063
Fri May 11 00:12:08 2012 us=329000 NO/99.203.209.33:57063 MULTI: primary virtual IP for NO/99.203.209.33:57063: 10.8.0.6
Fri May 11 00:12:10 2012 us=809000 NO/99.203.209.33:57063 PUSH: Received control message: 'PUSH_REQUEST'
Fri May 11 00:12:10 2012 us=809000 NO/99.203.209.33:57063 SENT CONTROL [NO]: 'PUSH_REPLY,redirect-gateway def1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 1
20,ifconfig 10.8.0.6 10.8.0.5' (status=1)

Server Config
========



local 172.99.171.151 # This is the IP address of the real network interface on the server connected to the router


port 4434
proto udp
dev tun



ca "C:\\key\\ca.crt"  

cert "C:\\key\\server.crt"

key "C:\\key\\server.key"  # This file should be kept secret

dh "C:\\key\\dh1024.pem"



server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt

push "redirect-gateway def1"
push "redirect-gateway def1 bypass-dhcp"
#push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"

keepalive 10 120



#comp-lzo
persist-key
persist-tun
status openvpn-status.log

verb 4
script-security 3

auth none
cipher none

Server IPv4 Route Table - Before Openvpn starts
===================================

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         On-link     172.99.171.151     41
    172.99.171.151  255.255.255.255         On-link     172.99.171.151    296
        224.0.0.0        240.0.0.0         On-link     172.99.171.151     41
  255.255.255.255  255.255.255.255         On-link     172.99.171.151    296

Persistent Routes:
  None

Server IPv4 Route Table - after Openvpn starts
====================================

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         On-link     172.99.171.151     41
         10.8.0.0    255.255.255.0         10.8.0.2         10.8.0.1   4256
         10.8.0.0  255.255.255.252         On-link          10.8.0.1   4511
         10.8.0.1  255.255.255.255         On-link          10.8.0.1   4511
         10.8.0.3  255.255.255.255         On-link          10.8.0.1   4511
    172.99.171.151  255.255.255.255         On-link     172.99.171.151    296
        224.0.0.0        240.0.0.0         On-link     172.99.171.151     41
  255.255.255.255  255.255.255.255         On-link     172.99.171.151    296

Persistent Routes:
  None

====

Note : Original IP changed to dummy for both client and server. Pls help me
Thanks
pada

maikcat

stupid question...

is your openvpn server side perfoming NAT?

Michael.

pada123

Thank Michael for giving your time.
I have not made any changes in server side except putting openvpn server conf file and running openvpn command.
Can you Please give me some hints what to add in my Windows 7 Server routing table.
I mistakenly thought It will be done by openvpn itself.
Thank you pada

pada123

Hi Michael -
May I know why this is stupid question...I am very new and I am not sure if this is silly question.
As I already mentioned both Server and Client directly connected to the internet. Thanks again - pada

maikcat

helo pada,

in your server config you are using this:

push "redirect-gateway def1"

this redirects *all* traffic through vpn,

the problem is that both pcs (i assume due to the public ip) dont
perform any type of NAT,
when you connect your client to the vpn and try to access internet
the internet traffic goes though openvpn server,but is originating from
the vpn private ip of client,so the solution is to perform NAT to outgoing
traffic originating from vpn using something like RAS...

hope it helps..

Michael.

pada123

Yes. Thank you Michael.