[SOLVED] forwarding all network traffic -- again..SORRY!

phyzfer

Hello everyone,

I'm having issues 'forwarding all network traffic' over the VPN. I know this has been discussed quite a bit through the forum but I just can't figure it out.

This is the current setup I have. I have openVPN installed and setup on a Windows8.1 machine inside my home network. I’ve setup a TAP (I named it tap-bridge) interface on this machine and gave it the IP 15.38.1.17. I have forwarded UDP port 1194 to the machine from my router to the that is currently running openVPN server. I’ve turned off windows firewall on this machine as well.

Everything works nicely. I get an IP based off of my configured server.config file (15.38.1.60). My client connects and all is well. However when I check the IP address (what is my IP in google search) I get the IP of the location where I am and not the Internet IP of my home.

I looked for solutions and found people recommending I should setup routes on my server to forward all network traffic. The problem is many of these recommendations are for unix boxes and no instructions on how to do this with windows (specifically windows 8). I am using Viscosity client on my OSX laptop to connect.

If I enable these two lines, the client connects but the internet doesn't work at all:

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 15.38.1.1"

I think everything is setup properly. I just need to add the routes somehow on the server and add the above two lines back into the server config and everything ought to work. The problem is I don't know how to setup routes =(. Can someone assist or point me in the right direction with regards to setting up routes on a windows 8 machine.

SERVER config

port 1194
proto udp
dev tap
dev-node tap-bridge
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 15.38.1.17 255.255.255.0 15.38.1.60 15.38.1.70
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
route-method exe
route-delay 2

CLIENT config

client
dev tap
dev-node tap-bridge
proto udp
remote SERVERADDRESS 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert asim-laptop.crt
key asim-laptop.key
ns-cert-type server
comp-lzo
verb 3

Many thanks!!

phyzfer

debbie10t,

Thank you for the kind and quick response. I did implement ethernet bridging on the server, but it doesn't route all traffic through the bridge:

server-bridge 15.38.1.17 255.255.255.0 15.38.1.60 15.38.1.70

Interestingly, I can see any of the machines in my home network via the VPN and can transfer files, etc. However when it comes to actually routing all network traffic (specifically web traffic) from my remote machine through the VPN it doesn't work. I'll check out pushing the route

I'll read through the first link you sent me since that looks like what I need. Although I've read places that I should not use

push "route "

in conjunction with :

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 15.38.1.1"

Is this the case?

thanks!

phyzfer

THANKS!!! All I had to do was change the server-bridge first parameter from the IP of the tap bridge interface to the DNS server/router. It works now, perfectly.

thank you!