[b]My GOAL ::[/b] I wanted to create a OpenVPN server on a windows 7 client , so that I can connect from any client to that server and change client's IP. As it works with any free openvpn servers.(like servers from vpngate) [b]What I have Done::[/b] I have followed this [url]https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide[/url] to create my server and client configs and certificates. I have also forwarded my UDP 1194 port on my server's router. [b] Result ::[/b] I can connect to the server from client successfully, but my IP reamains same as before. I also can't ping the server IP from the client. (i.e. 10.0.8.1) [b]Server cfg::[/b] [quote] port 1194 proto udp dev tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\server.crt" key "C:\\Program Files\\OpenVPN\\config\\server.key" dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem" server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 [/quote] [b]Client CFG::[/b] [quote] client dev tun proto udp remote 27.XX.XXX.XX 1194 resolv-retry infinite nobind persist-key persist-tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\rt_pc.crt" key "C:\\Program Files\\OpenVPN\\config\\rt_pc.key" ns-cert-type server comp-lzo verb 3 [/quote]

[Resolved] Connects to Server but can't ping the server

rafsuntaskin

My GOAL ::

I wanted to create a OpenVPN server on a windows 7 client , so that I can connect from any client to that server and change client's IP. As it works with any free openvpn servers.(like servers from vpngate)

What I have Done::

I have followed this https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide to create my server and client configs and certificates.

I have also forwarded my UDP 1194 port on my server's router.

Result ::

I can connect to the server from client successfully, but my IP reamains same as before.
I also can't ping the server IP from the client. (i.e. 10.0.8.1)

Server cfg::

port 1194

proto udp

dev tun

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"

dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

keepalive 10 120

comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 3

Client CFG::

client

dev tun

proto udp

remote 27.XX.XXX.XX 1194

resolv-retry infinite
nobind

persist-key
persist-tun

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\rt_pc.crt"
key "C:\\Program Files\\OpenVPN\\config\\rt_pc.key"

ns-cert-type server

comp-lzo

verb 3

rafsuntaskin

thanks for your reply debbie10t.

According to your suggestion I turned off total firewall in the server pc and initiated the connection.
As a result now I can ping the server(10.0.8.1) from the client, but the server can't ping the client IP(10.0.8.6) . And the Client IP remains same as before.

Here are the Logs :

Server LOG::

Mon Dec 16 14:27:51 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Mon Dec 16 14:27:51 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Dec 16 14:27:51 2013 Need hold release from management interface, waiting...
Mon Dec 16 14:27:51 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Dec 16 14:27:51 2013 MANAGEMENT: CMD 'state on'
Mon Dec 16 14:27:51 2013 MANAGEMENT: CMD 'log all on'
Mon Dec 16 14:27:51 2013 MANAGEMENT: CMD 'hold off'
Mon Dec 16 14:27:51 2013 MANAGEMENT: CMD 'hold release'
Mon Dec 16 14:27:51 2013 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Mon Dec 16 14:27:51 2013 Diffie-Hellman initialized with 1024 bit key
Mon Dec 16 14:27:51 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Dec 16 14:27:51 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Dec 16 14:27:51 2013 MANAGEMENT: >STATE:1387182471,ASSIGN_IP,,10.8.0.1,
Mon Dec 16 14:27:51 2013 open_tun, tt->ipv6=0
Mon Dec 16 14:27:51 2013 TAP-WIN32 device [Local Area Connection 5] opened: \\.\Global\{82B16AD0-4C51-473B-8537-1A004DCE241F}.tap
Mon Dec 16 14:27:51 2013 TAP-Windows Driver Version 9.9
Mon Dec 16 14:27:51 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {82B16AD0-4C51-473B-8537-1A004DCE241F} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Mon Dec 16 14:27:51 2013 Sleeping for 10 seconds...
Mon Dec 16 14:28:01 2013 Successful ARP Flush on interface [22] {82B16AD0-4C51-473B-8537-1A004DCE241F}
Mon Dec 16 14:28:01 2013 MANAGEMENT: >STATE:1387182481,ADD_ROUTES,,,
Mon Dec 16 14:28:01 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Mon Dec 16 14:28:01 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Dec 16 14:28:01 2013 Route addition via IPAPI succeeded [adaptive]
Mon Dec 16 14:28:01 2013 UDPv4 link local (bound): [undef]
Mon Dec 16 14:28:01 2013 UDPv4 link remote: [undef]
Mon Dec 16 14:28:01 2013 MULTI: multi_init called, r=256 v=256
Mon Dec 16 14:28:01 2013 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Dec 16 14:28:01 2013 ifconfig_pool_read(), in='RT_PC,10.8.0.4', TODO: IPv6
Mon Dec 16 14:28:01 2013 succeeded -> ifconfig_pool_set()
Mon Dec 16 14:28:01 2013 IFCONFIG POOL LIST
Mon Dec 16 14:28:01 2013 RT_PC,10.8.0.4
Mon Dec 16 14:28:01 2013 Initialization Sequence Completed
Mon Dec 16 14:28:01 2013 MANAGEMENT: >STATE:1387182481,CONNECTED,SUCCESS,10.8.0.1,
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 TLS: Initial packet from [AF_INET]123.136.30.90:1163, sid=c9cd5845 fdd6079b
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 VERIFY OK: depth=1, C=BD, ST=DHK, L=DHK, O=RT_SOFT, OU=RT_F, CN=changeme, name=RT_Farin, emailAddress=nomail@host.domain
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 VERIFY OK: depth=0, C=BD, ST=DHK, L=DHK, O=RT_SOFT, OU=changeme, CN=RT_PC, name=changeme, emailAddress=nomail@host.domain
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Dec 16 14:28:26 2013 123.136.30.90:1163 [RT_PC] Peer Connection Initiated with [AF_INET]123.136.30.90:1163
Mon Dec 16 14:28:26 2013 RT_PC/123.136.30.90:1163 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Dec 16 14:28:26 2013 RT_PC/123.136.30.90:1163 MULTI: Learn: 10.8.0.6 -> RT_PC/123.136.30.90:1163
Mon Dec 16 14:28:26 2013 RT_PC/123.136.30.90:1163 MULTI: primary virtual IP for RT_PC/123.136.30.90:1163: 10.8.0.6
Mon Dec 16 14:28:28 2013 RT_PC/123.136.30.90:1163 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 16 14:28:28 2013 RT_PC/123.136.30.90:1163 send_push_reply(): safe_cap=940
Mon Dec 16 14:28:28 2013 RT_PC/123.136.30.90:1163 SENT CONTROL [RT_PC]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Dec 16 14:30:02 2013 C:\Windows\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Mon Dec 16 14:30:02 2013 Route deletion via IPAPI succeeded [adaptive]
Mon Dec 16 14:30:02 2013 Closing TUN/TAP interface
Mon Dec 16 14:30:02 2013 SIGTERM[hard,] received, process exiting
Mon Dec 16 14:30:02 2013 MANAGEMENT: >STATE:1387182602,EXITING,SIGTERM,,

Client LOG::

Mon Dec 16 14:28:23 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Mon Dec 16 14:28:23 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Dec 16 14:28:23 2013 Need hold release from management interface, waiting...
Mon Dec 16 14:28:23 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Dec 16 14:28:23 2013 MANAGEMENT: CMD 'state on'
Mon Dec 16 14:28:23 2013 MANAGEMENT: CMD 'log all on'
Mon Dec 16 14:28:23 2013 MANAGEMENT: CMD 'hold off'
Mon Dec 16 14:28:23 2013 MANAGEMENT: CMD 'hold release'
Mon Dec 16 14:28:24 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Dec 16 14:28:24 2013 UDPv4 link local: [undef]
Mon Dec 16 14:28:24 2013 UDPv4 link remote: [AF_INET]27.147.219.30:1194
Mon Dec 16 14:28:24 2013 MANAGEMENT: >STATE:1387182504,WAIT,,,
Mon Dec 16 14:28:24 2013 MANAGEMENT: >STATE:1387182504,AUTH,,,
Mon Dec 16 14:28:24 2013 TLS: Initial packet from [AF_INET]27.147.219.30:1194, sid=06d0be5f bb9c5129
Mon Dec 16 14:28:24 2013 VERIFY OK: depth=1, C=BD, ST=DHK, L=DHK, O=RT_SOFT, OU=RT_F, CN=changeme, name=RT_Farin, emailAddress=nomail@host.domain
Mon Dec 16 14:28:24 2013 VERIFY OK: nsCertType=SERVER
Mon Dec 16 14:28:24 2013 VERIFY OK: depth=0, C=BD, ST=DHK, L=DHK, O=RT_SOFT, OU=changeme, CN=RT_server, name=changeme, emailAddress=nomail@host.domain
Mon Dec 16 14:28:24 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 16 14:28:24 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 16 14:28:24 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 16 14:28:24 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 16 14:28:24 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Dec 16 14:28:24 2013 [RT_server] Peer Connection Initiated with [AF_INET]27.147.219.30:1194
Mon Dec 16 14:28:25 2013 MANAGEMENT: >STATE:1387182505,GET_CONFIG,,,
Mon Dec 16 14:28:26 2013 SENT CONTROL [RT_server]: 'PUSH_REQUEST' (status=1)
Mon Dec 16 14:28:26 2013 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon Dec 16 14:28:26 2013 OPTIONS IMPORT: timers and/or timeouts modified
Mon Dec 16 14:28:26 2013 OPTIONS IMPORT: --ifconfig/up options modified
Mon Dec 16 14:28:26 2013 OPTIONS IMPORT: route options modified
Mon Dec 16 14:28:26 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Dec 16 14:28:26 2013 MANAGEMENT: >STATE:1387182506,ASSIGN_IP,,10.8.0.6,
Mon Dec 16 14:28:26 2013 open_tun, tt->ipv6=0
Mon Dec 16 14:28:26 2013 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{8724F434-7BA8-4A5E-BC03-3F6A6896B2B7}.tap
Mon Dec 16 14:28:26 2013 TAP-Windows Driver Version 9.9
Mon Dec 16 14:28:26 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {8724F434-7BA8-4A5E-BC03-3F6A6896B2B7} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Dec 16 14:28:26 2013 Successful ARP Flush on interface [20] {8724F434-7BA8-4A5E-BC03-3F6A6896B2B7}
Mon Dec 16 14:28:31 2013 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Mon Dec 16 14:28:31 2013 MANAGEMENT: >STATE:1387182511,ADD_ROUTES,,,
Mon Dec 16 14:28:31 2013 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Dec 16 14:28:31 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Dec 16 14:28:31 2013 Route addition via IPAPI succeeded [adaptive]
Mon Dec 16 14:28:31 2013 Initialization Sequence Completed
Mon Dec 16 14:28:31 2013 MANAGEMENT: >STATE:1387182511,CONNECTED,SUCCESS,10.8.0.6,27.147.219.30
Mon Dec 16 14:30:35 2013 C:\WINDOWS\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Dec 16 14:30:35 2013 Route deletion via IPAPI succeeded [adaptive]
Mon Dec 16 14:30:35 2013 Closing TUN/TAP interface
Mon Dec 16 14:30:35 2013 SIGTERM[hard,] received, process exiting
Mon Dec 16 14:30:35 2013 MANAGEMENT: >STATE:1387182635,EXITING,SIGTERM,,

waiting for your reply.

rafsuntaskin

It seems turning off firewall on Both side allows them to ping each other successfully. But the main problem remains intact.

THE CLIENT IP is still the SAME 🙁

I want the CLIENT IP to be Changed To the server's Public IP. Just as any free openvpn config files work.

Example::
Clients main Ip is :123.xxx.xxx.xxx
After connection to my server it should BE : 27.xxx.xxx.xxx.( This is the servers public IP).

Hope you understand 🙂