windows 7 client can't ping debian server.

sacredrose

hello everyone,

after a lot of struggle getting openvpn working all because i made a typo in the client config. i had it up and running now i wanted to add my workstation to it to for easy acces. so after installing openvpn on it copied over the working client config and certificate i used the openVPN GUI which came with the install to connect which worked i get an IP address. but that is about all that works. i can't ping my debian server which i connected to. and i can't ping my client from the server (note: for testing purpose i have already turned of all windows firewalls.) i'm running the same set up on a raspberry pi running raspian wheezy and it works i can SSH into it from the main server and systems can easily communicate.
have i over looked something ?

server.conf

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 7
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so login
client-cert-not-required
username-as-common-name

client.conf

client
dev tun
proto udp
remote 10.100.0.155 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
ns-cert-type server
comp-lzo
log         openvpn.log
verb 7
auth-user-pass

server side log.

Fri Sep 20 09:59:52 2013 us=457126 michiel/192.168.20.121:51163 UDPv4 WRITE [93] to [AF_INET]192.168.20.121:51163: P_DATA_V1 kid=0 DATA len=92
Fri Sep 20 09:59:52 2013 us=511477 GET INST BY REAL: 10.100.0.140:60988 [succeeded]
Fri Sep 20 09:59:52 2013 us=511551 mypc/10.100.0.140:60988 UDPv4 READ [109] from [AF_INET]10.100.0.140:60988: P_DATA_V1 kid=0 DATA len=108
Fri Sep 20 09:59:52 2013 us=511584 mypc/10.100.0.140:60988 TLS: tls_pre_decrypt, key_id=0, IP=[AF_INET]10.100.0.140:60988
Fri Sep 20 09:59:52 2013 us=511637 mypc/10.100.0.140:60988 GET INST BY VIRT: fe80::3da1:f003:2e95:3b42 [failed]
Fri Sep 20 09:59:52 2013 us=511667 mypc/10.100.0.140:60988 MULTI: bad source address from client [fe80::3da1:f003:2e95:3b42], packet dropped
Fri Sep 20 09:59:52 2013 us=513340 GET INST BY REAL: 10.100.0.140:60988 [succeeded]
Fri Sep 20 09:59:52 2013 us=513371 mypc/10.100.0.140:60988 UDPv4 READ [117] from [AF_INET]10.100.0.140:60988: P_DATA_V1 kid=0 DATA len=116
Fri Sep 20 09:59:52 2013 us=513388 mypc/10.100.0.140:60988 TLS: tls_pre_decrypt, key_id=0, IP=[AF_INET]10.100.0.140:60988
Fri Sep 20 09:59:52 2013 us=513415 mypc/10.100.0.140:60988 GET INST BY VIRT: fe80::3da1:f003:2e95:3b42 [failed]
Fri Sep 20 09:59:52 2013 us=513432 mypc/10.100.0.140:60988 MULTI: bad source address from client [fe80::3da1:f003:2e95:3b42], packet dropped
Fri Sep 20 09:59:52 2013 us=514323 GET INST BY REAL: 10.100.0.140:60988 [succeeded]
Fri Sep 20 09:59:52 2013 us=514437 mypc/10.100.0.140:60988 UDPv4 READ [117] from [AF_INET]10.100.0.140:60988: P_DATA_V1 kid=0 DATA len=116
Fri Sep 20 09:59:52 2013 us=514456 mypc/10.100.0.140:60988 TLS: tls_pre_decrypt, key_id=0, IP=[AF_INET]10.100.0.140:60988
Fri Sep 20 09:59:52 2013 us=514484 mypc/10.100.0.140:60988 GET INST BY VIRT: fe80::3da1:f003:2e95:3b42 [failed]
Fri Sep 20 09:59:52 2013 us=514501 mypc/10.100.0.140:60988 MULTI: bad source address from client [fe80::3da1:f003:2e95:3b42], packet dropped
Fri Sep 20 09:59:52 2013 us=514527 GET INST BY REAL: 10.100.0.140:60988 [succeeded]
Fri Sep 20 09:59:52 2013 us=514547 mypc/10.100.0.140:60988 UDPv4 READ [117] from [AF_INET]10.100.0.140:60988: P_DATA_V1 kid=0 DATA len=116
Fri Sep 20 09:59:52 2013 us=514568 mypc/10.100.0.140:60988 TLS: tls_pre_decrypt, key_id=0, IP=[AF_INET]10.100.0.140:60988
Fri Sep 20 09:59:52 2013 us=514619 mypc/10.100.0.140:60988 GET INST BY VIRT: fe80::3da1:f003:2e95:3b42 [failed]
Fri Sep 20 09:59:52 2013 us=514680 mypc/10.100.0.140:60988 MULTI: bad source address from client [fe80::3da1:f003:2e95:3b42], packet dropped
Fri Sep 20 09:59:53 2013 us=458404 MULTI: REAP range 208 -> 224

i hope somebody can help me.

sacredrose

i somehow managed to get the debian server to ping the client which works but i can't ping from my windows client. i was looking through the settings on both clients and noticed that the windows client didn't get a gateway so after trying i found out that the gateway should be 10.8.09 somehow. and after that it showed as a public network but still can't ping the linux or other client

tutzelki

Hi sacredrose,
at first glance I would say it has something to do with IPv6 not being supported properly. So the first thing I would try is to disable it on the Windows machine.
The following is in German because I simply don't know how this is in the English version of Windows:
Systemsteuerung\Netzwerk und Internet\Netzwerkverbindungen
This roughly translates to:
System Settings\Network and Internet\Network connections
Here you have to locate the adapter with the hardware name "TAP-Windows Adapter V9".
Right Click -> Properties -> uncheck "Internet Protocol Version 6 (TCP/IPv6) -> Ok
You need to be admin on the Windows machine for this.
If you need IPv6 the first thing would be to configure it properly, there should be a howto, and most importantly check that every version of OpenVPN is IPv6 capable, 2.2.2 should be sufficient.

sacredrose

yeah i thought that that was the problem too but after turning it of it still didn't work.