Hello, at the beginning sorry for my english. I succesfully connected my VPN client (localised somewhere in internet) to my VPN server (which is inside (W)LAN), but i also want to have access to entire (W)LAN. My problem is that i cannot configure it to work properly. I can access my server and connect all services (File sharing, Remote desktop) but i cannot surf any other (W)LAN clients. My (W)LAN topology (all computers are on Windows XP, router is the box with HTTP configure panel): [code] +-------------------------+ (public IP)| | {INTERNET}=============={ Router | | | | WLAN | +------------+------------+ | (192.168.1.254) | | +-----------------------+ | | | | | OpenVPN | WLAN: 192.168.1.1 +--------------{WLAN server | TAP: 10.8.0.1 | | | | | {TAP} | | +-----------------------+ | +--------+-----------+ | | | Other WLAN clients | | | | 192.168.1.xxx | | (internal net) | +--------------------+[/code] My server config: [code]# Port, protokół, włączenie tunelowania port 1194 proto tcp dev tap dev-node OpenVPN persist-key persist-tun # Certyfikaty i klucze ca ca.crt cert iap-dom.crt key iap-dom.key dh dh1024.pem # Ustawienia serwera server 10.8.0.0 255.255.255.0 push "route 192.168.1.0 255.255.255.0" keepalive 10 120 comp-lzo status openvpn-status.log verb 3[/code] My client config: [code]client dev tap proto tcp remote pivek.no-ip.org 1194 resolv-retry infinite nobind ca ca.crt cert iap-lap.crt key iap-lap.key ns-cert-type server comp-lzo verb 3[/code] I also configured router: Nazwa: LAN Bridge Destination: 10.8.0.0 Network mask: 255.255.255.0 Gateway: 192.168.1.1 What am I doing wrong?

[Resolved] Joining to LAN from outside w/ different gateway

Pivek

Hello,

at the beginning sorry for my english.

I succesfully connected my VPN client (localised somewhere in internet) to my VPN server (which is inside (W)LAN), but i also want to have access to entire (W)LAN. My problem is that i cannot configure it to work properly. I can access my server and connect all services (File sharing, Remote desktop) but i cannot surf any other (W)LAN clients.

My (W)LAN topology (all computers are on Windows XP, router is the box with HTTP configure panel):

                          +-------------------------+
               (public IP)|                         |
  {INTERNET}=============={     Router              |
                          |                         |
                          |         WLAN            |
                          +------------+------------+
                                       | (192.168.1.254)
                                       |
                                       |              +-----------------------+
                                       |              |                       |
                                       |              |        OpenVPN        |  WLAN: 192.168.1.1
                                       +--------------{WLAN    server         |  TAP: 10.8.0.1
                                       |              |                       |
                                       |              |           {TAP}       |
                                       |              +-----------------------+
                                       |
                              +--------+-----------+
                              |                    |
                              |  Other WLAN clients |
                              |                    |
                              |   192.168.1.xxx    |
                              |   (internal net)   |
                              +--------------------+

My server config:

# Port, protokół, włączenie tunelowania
port 1194
proto tcp
dev tap
dev-node OpenVPN
persist-key
persist-tun

# Certyfikaty i klucze
ca ca.crt
cert iap-dom.crt
key iap-dom.key
dh dh1024.pem

# Ustawienia serwera
server 10.8.0.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
status openvpn-status.log
verb 3

My client config:

client
dev tap
proto tcp
remote pivek.no-ip.org 1194
resolv-retry infinite
nobind
ca ca.crt
cert iap-lap.crt
key iap-lap.key
ns-cert-type server
comp-lzo
verb 3

I also configured router:
Nazwa: LAN Bridge
Destination: 10.8.0.0
Network mask: 255.255.255.0
Gateway: 192.168.1.1

What am I doing wrong?

maikcat

did you enabled ip forwarding on your openvpn server?

Michael

Pivek

I havevturned on this feature after you mentioned about it and it WORKS! Thank you very much!

Now i have another problem: it seems that i can access another WLAN computers by IP adress, but the NetBios names are not recognized. How can I make this work? I have googled for this and there are several solutions including enabling WINS server, bridging adapters and preparing LMHOSTS file.
Which one is most simple, fast and reliable?

maikcat

hi there,

I have googled for this and there are several solutions including enabling WINS server, bridging adapters and preparing LMHOSTS file.
Which one is most simple, fast and reliable?

wins by far...

Michael

Pivek

Hello again!
After 9 months I discovered a problem. I can't reach other computers in LAN from OpenVPN client. Also my other comuters in LAN and my router can't reach my OpenVPN Client.

In this topology:

                          +-------------------------+
               (public IP)|                         |
  {INTERNET}=============={     Router              |
                          |                         |
                          |         LAN            |
                          +------------+------------+
                                       | (192.168.1.254)
                                       |
                                       |              +-----------------------+
                                       |              |                       |
                                       |              |        OpenVPN        |  LAN: 192.168.1.1
                                       +--------------{LAN    server         |  TAP: 10.8.0.1
                                       |              |                       |
                                       |              |           {TAP}       |
                                       |              +-----------------------+
                                       |
                              +--------+-----------+
                              |                    |
                              |  Other computer    |
                              |                    |
                              |   192.168.1.2      |
                              +--------------------+

when i connect via OpenVPN from client i can:
- ping and browse shares on my OpenVPN server (10.8.0.1, 192.168.1.1)
- ping and browse shares (USB Drive) on my router (192.168.1.254)
- ping other computer (192.168.1.2)
- ping and browse my OpenVPN client (10.8.0.2) from my Open VPN server (10.8.0.1, 192.168.1.1)
- make a succesfull traceroute to other computer (192.168.1.2) from OpenVPN client (10.8.0.2)

but i CAN'T:
- browse other computer (192.168.1.2) from OpenVPN Client (10.8.0.2). Windows say's that host is unreachable. It is strange because i can ping him.
- ping or browse my VPN client (10.8.0.2) from other computer (192.168.1.2). He say's "Connection timeout".
- ping my VPN client (10.8.0.2) from router (192.168.1.254) via diagnostic tool. He says that he didn't recieve any packets.

Forwarding on OpenVPN server is enabled.
Routing regule on router is also added as i had written in the first post. Also conf files are almost the same.

What is going on?

Pivek

I'm sorry.
The issue is solved. It seems that problem was in firewall on the clients. After disabling firewall everything is ok.