dev tap on Windows7 using DHCP and same internal network

phyzfer

Hi,

I'm having some issues connecting to my openvpn server. This is the setup: I have a win7 machine running openvpn server behind a router. I am able to connect to the server from my client without issue if I don't use ethernet-bridging and use 'dev tun' with the server directive 'server 10.8.0.0 255.255.255.0'. However when I connect with the client I get an IP of 10.8.0.6 but the internet doesn't work (no browsing or other network activity at all on the client). The client shows connected (viscosity) and the server logs show the connection is successful too. The server's internal IP is 192.168.1.17 on a network that is all based on 192.168.1.x.

Since I want multiple clients connected, I then gave up on 'dev tun' and started looking into ethernet-bridging with 'dev tap'. I used the instructions here under Bridge Server on Windows XP:
http://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html

I was unable to set the IP address of the bridge adapter without losing connectivity on the server. The bridge adapter's IP is set by DHCP (by the router) as 192.168.1.101.

So instead of this line in my server config (as recommended by the instructions on the link above):
server-bridge 192.168.8.4 255.255.255.0 192.168.8.128 192.168.8.254

I now have :
dev tap
dev-node tap-bridge
server-bridge 192.168.1.101 255.255.255.0 192.168.1.62 192.168.1.70 (I want openvpn client IPs to range from .62 to .70).

I can now start up the server and it starts up just fine. However when I try to connect using the client I'm unable to connect at all. I've updated the client to use tap.
I want all clients to be part of the 192.168.1.x network that I have setup in the network that the server is a part of and I want the IPs to be in teh .62-.70 range.
Also, I'm curious why I get no internet access under the first case (using 'dev tun')? I apologize for the amateurish question, this is my first dabble into configuring OpenVPN.
I'm certain I'm missing something simple, but have looked at this over and over again without any more success =\.

Any help would be much appreciated!
phyzfer

phyzfer

debbie,

Thanks! I return home Sunday night and will make sure. I know I forwarded port 1194 to 1.17 but didn't update the router to forward port 1194 to .101. I know I didn't set a default gateway on the server either -- so I should set the default gateway on the bridge adapter to 192.168.1.1 (the IP of my router and DHCP server)? I believe the netmask was automatically set on the bridge adapter to 255.255.255.0. Next week I work from home and can test and work through these suggestions.

Thanks!