jb
I am trying to set up VPN connection from a computer on Amazon's cloud to a workstation in my office. The workstation is the VPN server, the EC2 instance is the client. A few notes, then my config files below:
- Amazon client is running Windows Server 2008 R2
- Workstation server is running Windows 7 Professional
- Trying to make a routed connection
- Installed TAP-Windows Adapter V9 (tap0901) and uncommented "dev-node tap0901" in both server and client config files
- Can ping from the server to the client
- Cannot ping from the client to the server
- Forward UDP 1194 on router to static IP on workstation
- Disabled Firewall for TAP Adapter on both server and client
- Allow UDP 1194 through firewall
- All TCP and UPD ports open on Amazon instance which is running Windows Server 2008 R2
- Tried commenting out "dev-node tap0901" on both server and client because it was unclear to me whether or not this was correct for routed method
#server.ovpn
port 1194
proto udp
dev tun
dev-node tap0901
ca "c:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\config\\server.crt"
key "c:\\Program Files\\OpenVPN\\config\\server.key"
dh dh1024.pem
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
#client.ovpn
client
dev tun
dev-node tap0901
proto udp
remote 108.46.7.172 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "c:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\config\\client1.crt"
key "c:\\Program Files\\OpenVPN\\config\\client1.key"
ns-cert-type server
comp-lzo
verb 3
Any help would be much appreciated. I'm new to VPN and have been at this for a few days now.
Thanks,
JB
jb
That's it! I turned off the firewall to Public Networks on the server and I can now ping in both directions.
Is this unsafe?
I made an Inbound rule to allow UDP 1194 communication but client can't ping unless the firewall is completely turned off.
Thanks,
JB
