Hello everyone.
Thanks for your fantastic product, I've been using it for a while now, and it has done its deed very nicely.
My server is a Windows 7 Pro laptop I have connected to my home router and properly port-forwarded.
The server's config:
port 17494
proto tcp
dev tap
dev-node TAPBridge
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
ifconfig-pool-persist ipp.txt
server-bridge 192.168.2.3 255.255.255.0 192.168.2.200 192.168.2.205
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
My client is a Windows 7 Pro desktop that is behind a restrictive network at my office. No UDP datagrams can pass thru, mainly because all Internet traffic is only redirected via proxy.
The client's config:
client
dev tap
proto tcp
remote **my-server-ip** **my-server-port**
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\external.crt"
key "C:\\Program Files\\OpenVPN\\config\\external.key"
ns-cert-type server
comp-lzo
verb 3
As you can see, I'm using it to access my home network with a bridging TAP interface.
The setup roughly looks like:
[Remote client 172.17.1.152]<->[172.17.1.70:3128 Proxy Server {unknown address}]<->
[INTERNET]
<->[{Dyn}Main Router 192.168.1.1]<-DMZ->[192.168.1.2 Secondary Router 192.168.2.1]<->[192.168.2.3 Home OpenVPN Server]
Sorry for the crude "drawing" of the setup.
I can connect to the VPN perfectly, and I can ping and use services from the computers inside the home network.
However, my ISP recently gave me a softphone to have a "virtual IP" phone line (nothing else than a SIP phone line on one of their servers). I have tested it using my Android phone with a data plan, and I can do calls on my server/laptop at home.
As you may know those softphones use UDP transport to relay the sound data, along with signaling.
That means that using it directly from my work is out of the question (it doesn't work at all). I tried using an SSH server, but UDP over SSH is really complicated and in my Windows-based setup it is a PITA.
So, I read that OpenVPN was the way to go there, however, I haven't been able to properly setup everything so that it works.
I tried using the route command on the client to send all the requests to the remote SIP server by the exposed interface, but I can't get any response.
The command I'm using:
route add **remote-sip-server-ip** mask 255.255.255.255 192.168.2.200
The route table as it is:
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 172.17.4.2 172.17.4.152 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
172.17.4.0 255.255.255.0 On-link 172.17.4.152 266
172.17.4.152 255.255.255.255 On-link 172.17.4.152 266
172.17.4.255 255.255.255.255 On-link 172.17.4.152 266
192.168.2.0 255.255.255.0 On-link 192.168.2.200 286
192.168.2.200 255.255.255.255 On-link 192.168.2.200 286
192.168.2.255 255.255.255.255 On-link 192.168.2.200 286
**remote-sip-server-ip** 255.255.255.255 On-link 192.168.2.200 31
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 172.17.4.152 266
224.0.0.0 240.0.0.0 On-link 192.168.2.200 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 172.17.4.152 266
255.255.255.255 255.255.255.255 On-link 192.168.2.200 286
How can I get to connect to that SIP server from my office? Am I missing something there?
Thanks and sorry for the long read.
