Hello, I know that there is about half milion similar posts, but I have no more strength to read them. Here is my problem:
I've set up OpenVPN server@ Debian.
server.conf:
local 192.168.1.69
port 7000
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.1 255.255.255.255 net_gateway"
keepalive 10 900
cipher AES-128-CBC
comp-lzo
max-clients 30
persist-key
persist-tun
log openvpn.log
log-append openvpn.log
verb 3
mute 20
client.conf:
client
dev tun
proto udp
port 7000
persist-key
persist-tun
ca ca.crt
cert mateusz.crt
key mateusz.key
comp-lzo
verb 3
mute 20
remote 83.238.XX.XX
mute-replay-warnings
cipher AES-128-CBC
ip route from pc@my home:
openvpn client status
Mon Sep 23 22:44:52 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Mon Sep 23 22:44:52 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Sep 23 22:44:52 2013 Need hold release from management interface, waiting...
Mon Sep 23 22:44:52 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Sep 23 22:44:52 2013 MANAGEMENT: CMD 'state on'
Mon Sep 23 22:44:52 2013 MANAGEMENT: CMD 'log all on'
Mon Sep 23 22:44:52 2013 MANAGEMENT: CMD 'hold off'
Mon Sep 23 22:44:52 2013 MANAGEMENT: CMD 'hold release'
Mon Sep 23 22:44:52 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Sep 23 22:44:52 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Sep 23 22:44:52 2013 UDPv4 link local (bound): [undef]
Mon Sep 23 22:44:52 2013 UDPv4 link remote: [AF_INET]83.238.75.58:7000
Mon Sep 23 22:44:52 2013 MANAGEMENT: >STATE:1379969092,WAIT,,,
Mon Sep 23 22:44:52 2013 MANAGEMENT: >STATE:1379969092,AUTH,,,
Mon Sep 23 22:44:52 2013 TLS: Initial packet from [AF_INET]83.238.75.58:7000, sid=160abf1d 17364e79
Mon Sep 23 22:44:53 2013 VERIFY OK: depth=1, C=PL, ST=Malopolska, L=Cracov, O=A1, OU=firma, CN=server, name=server, emailAddress=mateusz.mazur@a1europe.pl
Mon Sep 23 22:44:53 2013 VERIFY OK: depth=0, C=PL, ST=Malopolska, L=Cracov, O=A1, OU=server, CN=server, name=server, emailAddress=mateusz.mazur@a1europe.pl
Mon Sep 23 22:44:55 2013 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Sep 23 22:44:55 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 23 22:44:55 2013 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Sep 23 22:44:55 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 23 22:44:55 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Sep 23 22:44:55 2013 [server] Peer Connection Initiated with [AF_INET]83.238.75.58:7000
Mon Sep 23 22:44:57 2013 MANAGEMENT: >STATE:1379969097,GET_CONFIG,,,
Mon Sep 23 22:44:58 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Sep 23 22:44:58 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.1 255.255.255.255 net_gateway,route 10.8.0.1,topology net30,ping 10,ping-restart 900,ifconfig 10.8.0.6 10.8.0.5'
Mon Sep 23 22:44:58 2013 OPTIONS IMPORT: timers and/or timeouts modified
Mon Sep 23 22:44:58 2013 OPTIONS IMPORT: --ifconfig/up options modified
Mon Sep 23 22:44:58 2013 OPTIONS IMPORT: route options modified
Mon Sep 23 22:44:58 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Sep 23 22:44:58 2013 MANAGEMENT: >STATE:1379969098,ASSIGN_IP,,10.8.0.6,
Mon Sep 23 22:44:58 2013 open_tun, tt->ipv6=0
Mon Sep 23 22:44:58 2013 TAP-WIN32 device [Poӹczenie lokalne 2] opened: \\.\Global\{D8DB3AB6-D141-4A79-9E86-91DA56EDAB0A}.tap
Mon Sep 23 22:44:58 2013 TAP-Windows Driver Version 9.9
Mon Sep 23 22:44:58 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {D8DB3AB6-D141-4A79-9E86-91DA56EDAB0A} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Sep 23 22:44:58 2013 Successful ARP Flush on interface [17] {D8DB3AB6-D141-4A79-9E86-91DA56EDAB0A}
Mon Sep 23 22:45:03 2013 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Mon Sep 23 22:45:03 2013 MANAGEMENT: >STATE:1379969103,ADD_ROUTES,,,
Mon Sep 23 22:45:03 2013 C:\Windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.254 IF 11
Mon Sep 23 22:45:03 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Mon Sep 23 22:45:03 2013 Route addition via IPAPI succeeded [adaptive]
Mon Sep 23 22:45:03 2013 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Sep 23 22:45:03 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Sep 23 22:45:03 2013 Route addition via IPAPI succeeded [adaptive]
Mon Sep 23 22:45:03 2013 Initialization Sequence Completed
Mon Sep 23 22:45:03 2013 MANAGEMENT: >STATE:1379969103,CONNECTED,SUCCESS,10.8.0.6,83.238.75.58
network
(remote client)<====Internet====>(router)->openvpn
I want to connect from my home to office. The problem is that the tunel is establishing, but i can ping only 10.8.0.1. What can i do to fix it? I should note that i havent changed anythink at ip tables -> ive just forwarded a port on switch. I am a begginer in networking so you can laugh at me:)
