vmlxnetwork
I have 4 clients connected to the openvpn server.
Below is the list of connected client IPs and hosts.
cat ipp.txt
hostname1,10.8.0.4
hostname2,10.8.0.8
hostname3,10.8.0.12
hostname4,10.8.0.16
All clients can ping the server 10.8.0.1 but the server cannot ping any client, and clients cannot ping each other.
I have enabled in server.conf directive to allow clients to "see" each other but this did not help.
client-to-client
Thanks in advance.
maikcat
did you check your clients firewall as well?
client-to-client is needed for this to work...
Michael.
vmlxnetwork
What exactly should I check in the firewall? The clients are pingable on a different interface.
vmlxnetwork
I also tried to ping the client from the server while the firewall on the client is completely turned off. No ping reply.
Ideas?
vmlxnetwork
By disabling windows 7 firewall entirely where the client is installed I am able to ping the client from both the server and the client.
When windows 7 firewall on the client is turned on, the only way I could ping the client is by going to
Windows Firewall - Advanced Settings - Windows Firewall Propertes (under Overview) - Public Profile
Under Protected network connections - click Customize - uncheck the OPENVPN adapter. It is probably called "local area connection 2" if you don't rename it yourself.
I do not like the above method because windows keeps throwing warnings in the action center that there is a security risk and that windows firewall is not at the recommended settings.
The following method below, did not work for me but it does work for some others according to other forum threads. It doesn't require changing any firewall settings.
right click network - properties - adapters settings. Right click on TAP-Windows V9 adapter - properties - configure - advanced
Change media status from Application Controlled to Always Connected.
Does anyone know an alternative method perhaps to add a firewall rule in a way that windows will not throw security warnings?
Thanks in advance.
vmlxnetwork
Got everything working with Windows 7 firewall on at recommended settings.
In addition to the above method with making OPENVPN interface to be always available...
The solution was to add a rule in win7 firewall
Control Panel --> System and security --> Windows Firewall --> Advanced settings --> Inbound rules --> New rule --> custom rule
CUSTOM RULE:
in Protocol and ports: Protocol: ICMPv4
on the same panel go to customize, choose "Specific ICMP types", check the box "echo request"
The rest is trivial; go to next... next... and save it.
You should be done. This box responds ping from this point on.
