Hi,
I am really new to all of this, and I would like to set up my own VPN. I have set up an OpenVPN server on an old XP machine that is always running. I have also installed the OpenVPN client on my Windows 7 machine, and Tunnelblick (OpenVPN client for Mac) on my Mac (I am not that bothered if I can't connect to the server from the Mac).
This is what my server configuration file looks like:
local 192.168.1.102
port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-128-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
push "redirect-gateway def1"
And this is what my client configuration looks like:
client
dev tun
proto tcp
remote <server-ip> <server-port>
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert <name>.crt
key <name>.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 3
I have heard that you have to do some NAT, or something, which I have never encountered before. But I did some research online, and followed this tutorial:
http://forum.codecall.net/topic/42782-how-to-set-up-nat-routing-on-windows-xp/. And punched in these commands:
netsh routing ip nat install
netsh routing ip nat add interface "LAN" full
netsh routing ip nat add interface "LAN-VPN" private
Where the "LAN" is the NIC that I used before I started dealing with OpenVPN, and connects me to the internet fine. And the "LAN-VPN" NIC is the one that OpenVPN created when I installed it.
So, I think I have a handle on what is going on. The client connects to the server and starts sending over all the traffic. The server receives the traffic in through the "LAN-VPN" NIC and routes it to the "LAN" NIC, which gives the client internet access. Currently, the client connects fine, no problems. But, when I try and go to a website, the ring keeps spinning for a few minutes and then come back saying "This webpage is not available". So, I figure that this must be a server side problem, possibly to do with the routing out to the internet.
I really am new to all of this, and would appreciate any help or advise.
Thanks in advance!
P.S.- I thought it would be worth mentioning that I am currently doing all of this on my home network. I do not have another network which I have easy access to near me, so I would like to get everything set up at home, so that I can easily connect to the server when I'm out.