Hi,
for years I had no problems running an OpenVPN installation between a Debian based server and a Windows 2003 client machine where the client also exposes its local subnet. Now I want to replace the 2003 with a 2008R2 machine. I simply installed the latest 2.2.2 software and moved my existing configuration. The VPN starts up without any problem, can connect and everything seems to work fine. The main ip address is 172.18.20.20 and the VPN ip address of the client is 10.8.0.6.
But then I tried to connect to the 2008R2 machine using 172.18.20.20 from a XP client running in the server subnet which showed several problems: accessing the Windows shares works only occasionally, same for RDP which only works sometimes. Even tracert was unable to ping the VPN client machine itself while the previous hops returned ping values. Accessing other machines of the subnet behind the 2008R2 machine works without any problem, including shares and RDP.
I tried a lot of configuration tips from the net but nothing really helped. Then I tested the connection using the VPN address (10.8.0.6) instead of the real address and *bang* everything worked fine. The 2008R2 firewall is completely off. Any ideas how I can solve this problem?
Server configuration:
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
client-config-dir ccd
route 172.18.0.0 255.255.0.0
keepalive 10 120
comp-lzo adaptive
user openvpn
group openvpn
persist-key
persist-tun
status /var/log/openvpn-status.log
log /var/log/openvpn.log
verb 3
Client config:
client
dev tun
link-mtu 1400
ip-win32 manual
route-method exe
script-security 3 system
route-up c:\\setupnet.bat
route-delay 15 15
down c:\\flushdns.bat
up-restart c:\\flushdns.bat
proto tcp
remote xxxx 8888
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo adaptive
verb 3
