Hi Guys,
first of all sorry for my bad english.
I've the following problem:
I ve a Windows 2008 Server at home (MSDNAA Licence) and i tried to set up an OVPN Srv on it.
Yesterday I finished the Setup and Config but when the Windows Firewall on the Server was enabled, VPN Clients weren't able to communicate with Intranet Clients and other way round.
Yeah, now u will say "Firewall Exception = Solved"
But please read this post until the end.
I've the basics to administrate the firewall and creating routes.
So i killed my server yesterday resetting the firewall. After a long night now i ve a fresh configured 2008 Srv with ovpn running on it.
Same and other Problems.
Following Facts
(As Img:
)
1. Router IP 10.10.1.1/24, DHCP on, DNS on, DHCP Range 10.10.1.50-200/24
2. Server IP Intranet NIC: 10.10.1.10/24, OVPNsrv IP: 10.10.0.1/24 (/30???)
3. Intranet Clients cant ping VPN Srv (10.10.0.1) although i set up a static route on the router (10.10.0.0/24 over 10.10.1.10/24)
4. Server can Ping both Subnets (10.10.0.0/24 and 10.10.1.0/24)
I set up following OVPN Srv config:
local 10.10.1.10
port 1194
proto udp
dev tun
dh E:\\OVPN\\easy-rsa\\server-keys\\dh1024.pem
ca E:\\OVPN\\easy-rsa\\server-keys\\ca.crt
cert E:\\OVPN\\easy-rsa\\server-keys\\XXX.crt
key E:\\OVPN\\easy-rsa\\server-keys\\XXX.key
server 10.10.0.0 255.255.255.0
ifconfig-pool-persist E:\\OVPN\\log\\ipp.txt
client-to-client
push "route 10.10.1.0 255.255.255.0"
push "dhcp-option DNS 10.10.1.1"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status E:\\OVPN\\log\\openvpn-status.log
log E:\\OVPN\\log\\openvpn.log
log-append E:\\OVPN\\log\\openvpn.log
verb 3
Seems correct, Service starts correct, route print has correct routes to 10.10.0.0 and 10.10.1.1
Clients can connect (testet in Intranet, k no Inet connection anymore because of push route in srv config)
Client config:
client
dev tun
proto udp
remote no-ip-URL-here 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert *.crt
key *.key
comp-lzo
verb 3
Router has port redirection for 1194 to Srvs Intranet IP
Router has static route to 10.10.0.0/24 over 10.10.1.10
Srv Firewall allows incoming and outgoing connections over 1194 UDP/TCP
Srv Firewall also Intranet Clients allow EVERY In/Out Connection on EVERY Port frpm 10.10.0.0/24, 10.10.0.0/30 and 10.10.1.0/24
So why i cant ping clients or cant ping the VPN srv from an Intranet Client?
Plz Help me -.-
Greets
Chris
