VPN server behind NAT ?

LesleyChao

I am newbie to VPN servers, but i want to setup VPN server on Windows box behind NAT and to connect from external PC to the server to route all the traffic.
Is it possible to create such setup without editing router and firewall settings ?

Thanks in advance.

maikcat

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

binx

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

alexev

binx wrote May You help me? I have same problem. My OpenVPN server is placed behind router. I have forwarded corresponding port. But client can not conect to server.
configuration On the server

binx

alexev wrote
binx wrote May You help me? I have same problem. My OpenVPN server is placed behind router. I have forwarded corresponding port. But client can not conect to server.
configuration On the server
If your OPenVPN is placed behind a router you need to open the necesary ports in the router configuration, your server may be listening at 1195 port but the incomming conections will go first to the router that needs to allow those conections and forward/nat to your OPenVPN server.

But how can I recognize ports that needs for new connections from clients? May be is there any options in client configuration or server configuration?

alexev

binx wrote
alexev wrote
binx wrote May You help me? I have same problem. My OpenVPN server is placed behind router. I have forwarded corresponding port. But client can not conect to server.
configuration On the server
If your OPenVPN is placed behind a router you need to open the necesary ports in the router configuration, your server may be listening at 1195 port but the incomming conections will go first to the router that needs to allow those conections and forward/nat to your OPenVPN server.
But how can I recognize ports that needs for new connections from clients? May be is there any options in client configuration or server configuration?

Your config says the server is listening on port 1194, but unless the server itself has an 1to1 ip adressing, your clients are going to conect to the public IP of the router asking for tat port.

Your router needs to know that when he receives an incoming conection to (for example) 65.40.50.4:1194 he must pass it (nated) to your OPenVPN server to the same port.

I do not have much experiencie configuring such things in Windows enviroments so i cannot tell you exactly how to do it 🙁 (IP tables FTW)

binx

If your OPenVPN is placed behind a router you need to open the necesary ports in the router configuration, your server may be listening at 1195 port but the incomming conections will go first to the router that needs to allow those conections and forward/nat to your OPenVPN server.[/quote]
But how can I recognize ports that needs for new connections from clients? May be is there any options in client configuration or server configuration?[/quote]

Your config says the server is listening on port 1194, but unless the server itself has an 1to1 ip adressing, your clients are going to conect to the public IP of the router asking for tat port.

Your router needs to know that when he receives an incoming conection to (for example) 65.40.50.4:1194 he must pass it (nated) to your OPenVPN server to the same port.

I do not have much experiencie configuring such things in Windows enviroments so i cannot tell you exactly how to do it 🙁 (IP tables FTW)[/quote]
Yes I have done it I customs my router that it forwards incoming packets to openserver in the 1194 port. but I think the packets don't go to him. I don't know why.