After OpenVPN connect no access LAN

glpk

Hi,
When i connect vpn the connection is established. I can ping the openvpn server but i don't have access to LAN.
VPN server: 10.8.0.1
my LAN: 192.168.20.XXX

I need help... Someone help me please....

Here is my vpnserver file config:

port 1194
proto udp
dev tun
ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key"  # This file should be kept secret
dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
push "route 192.168.20.0 255.255.255.0"

My client config file:

client
dev tun
proto udp
remote my-server-1 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\macwin7.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\macwin7.key"
ns-cert-type server
comp-lzo
verb 3

maikcat

please always remove comments from your configs

to your problem...

my LAN: 192.168.20.XXX

what exactly is YOUR lan? server side or client side?

what ip networks are both server/client are using?

Michael.

glpk

Hi maikcat,
Sorry for the confusion in the first post.

My LAN is 192.168.20.0 to 192.168.20.254.. When the vpn is connected the only ip that i can ping is my vpn server 10.8.0.1. I can not ping a single machine on the 192.168.20.XXX 🙁

After the openvpn is established what I want is to have access to a single machine. That is 192.168.20.33 by browser.

How can i do that?

Thanks

glpk

Hi maikcat,
I didn't respond to all your question. Sorry.

Server:
My lan ip's are: 192.168.20.XXX
OpenVPN Server: 10.8.0.1

Client: Ip of vpn 10.8.0.10

When the client connect to the openvpn server get the ip 10.8.0.10(for exemple) and i want to be able to access to lan 192.168.20.XXX

Thank you again...

glpk

Just one more thing.. My openvpn server is installed on Windows 7 64 bits...

Thanks...

maikcat

hi there,

did you enabled ip forwarding on openvpn server?
did you setup your pc (openvpn server side) to use as default gateway your openvpn server?
did you configured firewall on both openvpn server & pc behind it to allow incoming sessions from vpn tunnel?

Michael.

glpk

Hi Michael,
I didn't do that and i don't know how to do it 🙁

How can i enable ip forwardind on openvpn server?
How can i setup my pc (openvpn server) to use default gateway of my openvpn server?

My openvpn server is installed on a Windows 7...

Thank you.

maikcat

ip forwarding

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
Set the following registry value:
Value Name: IPEnableRouter
Value type: REG_DWORD
Value Data: 1

restart your computer

Michael.

glpk

Hi Michael,
I already do that but still no access to the LAN on the client 🙁

The another option that you said was: did you setup your pc (openvpn server side) to use as default gateway your openvpn server?

How can i do that? I force the gateway of vpn server with the ip adress of openvpn server?

Thank You..

maikcat

i said that if you have a third pc in the same network with the openvpn server
itself, just use the lan ip of the openvpn server as its default gateway.

can you post the output of:

netstat -nr (from your openvpn client AFTER he connects)
tracert 192.168.20.33

also run openvpn with admin rights on your client...

Michael.

glpk

Ok Michael,
Next monday i wiil do that and then i tell you how it works and i put here the result of netstat -nr

Thank you...

tsberry901

Consider this an alternate method of solving your problem:

If your home router is the OpenVPN gateway, then install openvpn on all your home lan computers using a client configuration file for each computer. (In other words, each home computer will actually have two network adapters, one real, and one virtual.) The virtual adapter(s) will point to the the router or VPN gateway, ie: 10.8.0.1)

Also, make sure your firewall software allows VPN traffic for the virtual adapter.

Although not the optimum, this "kludge" WILL work.