EHFrancisco
Hi Folks,
I hope this is a simple question requiring a simple answer. I am having trouble with routing. My OpenVPN setup works as far as connecting to the server goes.
- I can connect the client to the server.
- I can ping the servers virtual gateway (10.8.0.1) and the servers LAN NIC (192.168.100.7) from the remote client.
- I can ping the virtual gateway (10.8.0.1) from the LAN.
- I can RDP into the VPN server from the remote client.
- But I cannot ping the LAN on the server side.
My OpenVPN server is on a Windows 2003 server and I do have IP-Forwarding enabled (yes, I rebooted the server). I have also added the route to the 10.8.0.0 network to the server LAN gateway.
What am I missing?
Thanks in advance.
Here are my config files:
Server:
local 192.168.192.7
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\rwl-dev2.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\rwl-dev2.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
route 192.168.100.0 255.255.255.0
push "route 192.168.100.0 255.255.255.0"
push "route 192.168.123.0 255.255.255.0"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 5
Client:
client
dev tun
proto udp
remote nnn.nnn.nnn.nnn 1194
resolv-retry infinite
persist-key
persist-tun
ca C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\ca.crt
cert C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\client1.crt
key C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\client1.key
ns-cert-type server
comp-lzo
verb 3
maikcat
if you do a traceroute to 10.8.0.1 from a lan pc what do you see?
is RAS enabled on 2003?
Michael.
EHFrancisco
Ras is disabled.
tracert 10.8.0.1
Tracing route to RWL-DEV2 [10.8.0.1]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms RWL-DEV2 [10.8.0.1]
Trace complete.
maikcat
can you ping the pc (the one you run tracert) from a openvpn client?
if not,did you disable its firewall?
Michael.
EHFrancisco
No I cannot ping from the client to the tracert serv
er. Yes, the firewall is off.
Mimiko
