[SOLVED] 'topology subnet'. Linux and Windows clients

lexus45

Hello all.
I looked through the threads but didn't find anything similar, so I write here.

I have a working OpenVPN 2.1.1 installation with several Linux clients.
I use 'topology subnet' to keep all clients in one network 10.108.4.0/24, they need to see each other. All works well.
Now I need to add a Windows client to the VPN. And I faced the problem that the Windows TAP driver can handle only /30 subnet mask.

What is the best solution to make all clients be in the same network, assuming that clients are both Linux and Windows machines?

Regards, Lexus45.

janjust

The option 'topology subnet' is supported on Windows, MacOS and Linux; I'd recommend upgrading to the latest version of OpenVPN (2.2.2 or 2.3.1), although this option was already supported in 2.1+.

lexus45

janjust wrotealthough this option was already supported in 2.1+.

Thank you for the reply.

Does it mean that I can keep both Linux and Windows clients in the same VPN network? Everybody will have 10.108.4.x address, and the server's internal OpenVPN address will still be 10.108.4.1 ?

But what is the right solution to include a Windows client in my implementation ?

janjust

yes , all clients would be part of the same /24 network (or whichever subnet you prefer); the server will always be reachable at the .1 address; However, without the option

client-to-client

the clients will not be able to "see" each other.

lexus45

janjust wroteHowever, without the option

client-to-client

the clients will not be able to "see" each other.

thank you,yes,i know about this option and use it with great pleasure

lexus45

Solved.

I moved my Windows client to development version of OpenvpnGUI (http://openvpn.se/development.html) , before I configured a stable one. This is the solution, as dev version is based on 2.1, the stable is on 2.0.

Now the Windows client config file looks like this and works fine, including client-to-client connection:

client
dev tun
proto udp
remote X.Y.Z.Z 1194
topology subnet
nobind
persist-key
persist-tun
ca "c:\\program files\\openvpn\\ca.crt"
cert "c:\\program files\\openvpn\\client5.crt"
key "c:\\program files\\openvpn\\client5.key"
comp-lzo
verb 3

janjust

Excellent news; BTW, the GUI at http://openvpn.se is NOT the official one - download the official client (including the GUI) from http://openvpn.net/index.php/download/community-downloads.html

lexus45

janjust wroteExcellent news; BTW, the GUI at http://openvpn.se is NOT the official one - download the official client (including the GUI) from http://openvpn.net/index.php/download/community-downloads.html

Thank you much, janjust, I even didn't know about it. I knew only about openvpn.se , as a Windows/GUI version of OpenVPN.
So, to summarize the results, everything is working fine now.