Hi everybody,
while setting up an OpenVPN network, I came accross a rather strange problem. First of all, these are my configs so far (partly anonymised).
server.conf
port 1194
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route a.b.c.128 255.255.255.192"
push "dhcp-option DNS a.b.c.129"
push "dhcp-option WINS a.b.c.129"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
client.conf
client
dev tun
proto udp
remote a.b.c.233 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3
As long as I'm using the OpenVPN client (v2.2.2) on Windows XP (32bit Home Edition) everything's just working perfectly. The client connects to the server, the DNS options are pushed and implemented and I can navigate and use the server's LAN as expected.
However, when I'm using the OpenVPN client on Windows 7 (64bit Professional Edition), the client can connect to the server and I can connect to host on the server's LAN by using their IP addresses. But the pushed DNS settings are
not implemented:
C:\Users\Sebastian>ipconfig /all
[...]
Ethernet-Adapter LAN-Verbindung 5:
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : TAP-Win32 Adapter V9
Physikalische Adresse . . . . . . : 00-FF-EE-B0-0E-0C
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
IPv4-Adresse . . . . . . . . . . : 10.8.0.6(Bevorzugt)
Subnetzmaske . . . . . . . . . . : 255.255.255.252
Lease erhalten. . . . . . . . . . : Donnerstag, 7. Juni 2012 11:11:49
Lease läuft ab. . . . . . . . . . : Freitag, 7. Juni 2013 11:11:49
Standardgateway . . . . . . . . . :
DHCP-Server . . . . . . . . . . . : 10.8.0.5
NetBIOS über TCP/IP . . . . . . . : Aktiviert
[...]
(Sorry for the German - the main problem should get clear, though.)
So far, I haven't found anything helpful in the client's log:
Thu Jun 07 15:33:08 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Jun 07 15:33:08 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jun 07 15:33:08 2012 LZO compression initialized
Thu Jun 07 15:33:08 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jun 07 15:33:08 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jun 07 15:33:08 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jun 07 15:33:08 2012 Local Options hash (VER=V4): '41690919'
Thu Jun 07 15:33:08 2012 Expected Remote Options hash (VER=V4): '530fdded'
Thu Jun 07 15:33:08 2012 UDPv4 link local: [undef]
Thu Jun 07 15:33:08 2012 UDPv4 link remote: a.b.c.233:1194
Thu Jun 07 15:33:08 2012 TLS: Initial packet from a.b.c.233:1194, sid=9486fe59 fd008c27
Thu Jun 07 15:33:08 2012 VERIFY OK: depth=1, *****
Thu Jun 07 15:33:08 2012 VERIFY OK: nsCertType=SERVER
Thu Jun 07 15:33:08 2012 VERIFY OK: depth=0, *****
Thu Jun 07 15:33:08 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jun 07 15:33:08 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jun 07 15:33:08 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jun 07 15:33:08 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jun 07 15:33:08 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jun 07 15:33:08 2012 [server] Peer Connection Initiated with 130.83.212.233:1194
Thu Jun 07 15:33:11 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Jun 07 15:33:11 2012 PUSH: Received control message: 'PUSH_REPLY,route a.b.c.128 255.255.255.192,dhcp-option DNS a.b.c.129,dhcp-option WINS a.b.c.129,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Jun 07 15:33:11 2012 OPTIONS IMPORT: timers and/or timeouts modified
Thu Jun 07 15:33:11 2012 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jun 07 15:33:11 2012 OPTIONS IMPORT: route options modified
Thu Jun 07 15:33:11 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Jun 07 15:33:11 2012 ROUTE default_gateway=10.1.0.1
Thu Jun 07 15:33:11 2012 TAP-WIN32 device [LAN-Verbindung 5] opened: \\.\Global\{EEB00E0C-BE25-4EF9-9FC4-51940FD1B6AE}.tap
Thu Jun 07 15:33:11 2012 TAP-Win32 Driver Version 9.9
Thu Jun 07 15:33:11 2012 TAP-Win32 MTU=1500
Thu Jun 07 15:33:11 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {EEB00E0C-BE25-4EF9-9FC4-51940FD1B6AE} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Jun 07 15:33:11 2012 Successful ARP Flush on interface [24] {EEB00E0C-BE25-4EF9-9FC4-51940FD1B6AE}
Thu Jun 07 15:33:16 2012 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Thu Jun 07 15:33:16 2012 C:\WINDOWS\system32\route.exe ADD a.b.c.128 MASK 255.255.255.192 10.8.0.5
Thu Jun 07 15:33:16 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Jun 07 15:33:16 2012 Route addition via IPAPI succeeded [adaptive]
Thu Jun 07 15:33:16 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Jun 07 15:33:16 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Jun 07 15:33:16 2012 Route addition via IPAPI succeeded [adaptive]
Thu Jun 07 15:33:16 2012 Initialization Sequence Completed
Any ideas?
Regards,
sjs77
PS: Of course the OpenVPN GUI is run with administrator's privileges
