[Solved] Loose local connectivity after client is connected

dentalan

When the client PC connects to the VPN it looses loca connectivity. I can acces it from outside LAN and I can access remote webpages from this PC, but I cannot see the router from this PC or see this PC from other local PCs. Firstly I could not even see web pages but I noticed that I I had entered in my LAN connection the local router as a DNS server. After I changed that to my ISP's DNS servers I fixed that.

 Server config
port 1194
proto udp
dev tun
dev-node TAP-Win32
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.8.1.0 255.255.255.0
ifconfig-pool-persist ipp.txt
management localhost 23
route 10.10.11.0 255.255.255.0
route 192.168.10.0 255.255.255.0
route 192.168.1.0 255.255.255.0
client-config-dir ccd
client-to-client
push "route 192.168.20.0 255.255.255.0"
push "route 10.10.11.0 255.255.255.0"
push "route 192.168.10.0 255.255.255.0"
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6

Client config
client
dev tun
dev-node TAP-Win32
proto udp

remote xxxx.xx-xx.xxx1194
resolv-retry infinite
nobind
ser nobody
persist-key
persist-tun
ca ca.crt
cert client4.crt
key client4.key
ns-cert-type server
comp-lzo
verb 3

From another location (with another computer connected to the VPN) there is no problem. So it must not be from the server side the problem
Thank you

mwandelaar

I see you are pushing several routes to your client:

dentalan wrote

push "route 192.168.20.0 255.255.255.0"
push "route 10.10.11.0 255.255.255.0"
push "route 192.168.10.0 255.255.255.0"
push "route 192.168.1.0 255.255.255.0"

Is any of these networks your local lan? If so, you are creating routing-loops (redirecting your local network via the vpn) in your network, which can really mess-up your connectivity.

Is

another location (with another computer connected to the VPN)

this a remote connection (from "outside", i.e. over the internet)? If so, this might confirm the routing-issue.

Can you post some server- and client-logs?

dentalan

192.168.20.0 is the local network of the server. Should I remove it?
With "An other location" I mean the 192.168.1.1 site, which is over the Internet and works ok
I will try to remove the **.**.20.0 and see what happens
Thank you
I will post some logs too

dentalan

I found it!
It was a stupid mistake. I mistyped the name of the client in the server's ccd directory. Instead of "client4" I had typed "clieny4" so in the log file it reported this warning

Sun Sep 08 21:28:32 2013 WARNING: potential route subnet conflict between local LAN [192.168.10.0/255.255.255.0] and remote VPN [192.168.10.0/255.255.255.0]

After correcting that it works OK.
Thanks for the help