Can't ping to lan network behind the vpn server

typhii

I have this problem a few weeks now and I don't know how to solve this. Im running my openvpn server on my Windows 7 computer at home on a virtual ubuntu machine, and im connecting form my work with my windows 7 laptop. I can ping to the server (10.8.0.1) but I can't ping the ubuntu machine or any another machine on the network.

ubuntu machine ip : 192.168.1.16
vpnserver : 10.8.0.1
gateway : 192.168.1.1
IP forwarding : enabled

windows 7 client : 10.8.0.4

server config


port 1194
proto udp
dev tap
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key  # This file should be kept secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.1 255.255.255.0"

client-to-client
keepalive 10 60
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append  /var/log/openvpn/openvpn.log
verb 6

client config

# Specify that we are a client and that we
client
dev tap
proto udp
remote 89.99.69.24 1194
resolv-retry infinite
nobind
ca C:\\certificaat\\ca.crt
cert C:\\certificaat\\client1.crt
key C:\\certificaat\\client1.key
#

ifconfig on the ubuntu machine

eth0      Link encap:Ethernet  HWaddr 08:00:27:bc:eb:78
          inet addr:192.168.1.16  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:20287 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5369 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:22013932 (22.0 MB)  TX bytes:690179 (690.1 KB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:70 errors:0 dropped:0 overruns:0 frame:0
          TX packets:70 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:5985 (5.9 KB)  TX bytes:5985 (5.9 KB)

tap0      Link encap:Ethernet  HWaddr b2:5c:ca:21:0b:b9
          inet addr:10.8.0.1  Bcast:10.8.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1470 errors:0 dropped:0 overruns:0 frame:0
          TX packets:27 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:224722 (224.7 KB)  TX bytes:4090 (4.0 KB)

maikcat

hi there,

first change this

push "route 192.168.1.1 255.255.255.0"

to this

push "route 192.168.1.0 255.255.255.0"

can you post the output of iptables -L -v from your ubuntu?

Michael.

typhii

I changed the push route in the server config and here is my iptable.

Chain INPUT (policy ACCEPT 11 packets, 648 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 15 packets, 1764 bytes)
 pkts bytes target     prot opt in     out     source               destination

maikcat

is it still not working?

what windows your client has?

if it vista or 7, try running openvpn with admin rights & check routing table by
issuing netstat -nr after you connect..

Michael.

typhii

Im using Windows 7 and im running the openvpn client in administrator mode but it still wont work.

here is my netstat,

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG        0 0          0 eth0
10.8.0.0        0.0.0.0         255.255.255.0   U         0 0          0 tap0
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U         0 0          0 eth0

typhii

I might have found the problem. virtual box seems to have a problem with forwarding, it's a very old bug and they still didn't fix it. Im gonna use another software to run my ubuntu machine, I hope that it will fix the problem.

maikcat

ok then,

locking topic

Michael.