Hi oVPN Community, we use a OpenVPN Setup that has been working für more than 5 years successfully. Lately there have been problems that clients are unable to reach some (just some, most work fine) machines in the "dialed in" network right after connecting. The crazy part is that after some reconnecting attempts or just waiting the machines become finally available via vpn, so i suspect this is no problem in principle. The Setup works, but some machines just need some 'wild pinging' and waiting the becom available via vpn. Info: Serverside we use [code]OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011[/code] on a Win2k3 Server Clients are using different 2* Versions the server.ovpn [code]local 192.168.100.11 port 1194 proto udp dev tun dev-node "VPN" ca ca.crt cert server.crt dh dh1024.pem server 10.8.0.0 255.255.255.0 push "route 192.168.100.0 255.255.255.0" client-config-dir ccd route 192.168.1.0 255.255.255.0 push "dhcp-option DNS 192.168.100.8" push "dhcp-option DNS 192.168.100.2" push "dhcp-option WINS 192.168.100.8" client-to-client keepalive 10 120 comp-lzo user nobody group nobody persist-key persist-tun status openvpn-status.log verb 3[/code] Please let me know if i can provide further information to help diagnosing this strange problem. thanxks in advance, Lune

Working oVPN-Problems with some machines beeing unreachable

lunex

Hi oVPN Community,

we use a OpenVPN Setup that has been working für more than 5 years successfully.
Lately there have been problems that clients are unable to reach some (just some, most work fine)
machines in the "dialed in" network right after connecting.

The crazy part is that after some reconnecting attempts or just waiting the
machines become finally available via vpn, so i suspect this is no problem in principle.
The Setup works, but some machines just need some 'wild pinging' and waiting
the becom available via vpn.

Info:

Serverside we use

OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011

on a Win2k3 Server

Clients are using different 2* Versions

the server.ovpn

local 192.168.100.11
port 1194
proto udp
dev tun
dev-node "VPN"
ca ca.crt
cert server.crt
dh dh1024.pem
server 10.8.0.0 255.255.255.0
push "route 192.168.100.0 255.255.255.0"
client-config-dir ccd
route 192.168.1.0 255.255.255.0
push "dhcp-option DNS 192.168.100.8"
push "dhcp-option DNS 192.168.100.2"
push "dhcp-option WINS 192.168.100.8"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

Please let me know if i can provide further information to help diagnosing this strange problem.

thanxks in advance,
Lune

maikcat

hi there,

try to add a static route for the vpn network (10.8.0.0/24 & 192.168.1.0/24)
to the "problematic" pcs , in case there is a routing problem...

is there by any chance RAS service running on your win2k3?

Michael.

lunex

Hi Michael,

thanks for your fast answer!
Yes, there is a "RAS Connections Service" running (svchost.exe -k netsvcs)

By static route you mean i enter in the command on the machines:

route add 10.8.0.0 mask 255.255.255.0 192.168.100.11

where 192.168.100.11 is the openVPN Server?

thanks
Lunex

maikcat

hi there,

By static route you mean i enter in the command on the machines:
Code:
route add 10.8.0.0 mask 255.255.255.0 192.168.100.11

where 192.168.100.11 is the openVPN Server?

yeap...

btw is it possible to test your setup with RAS disabled (for a while..)?

regards,

Michael.

lunex

Thanks!

I've added the route and disabled the service, as we wont need it anyway.

hope this will solve the problem!

have a great weekend,

Lunex