Josecanalla
Hello. I'm new in VPN.
First of all, I have looked for this problem in websites, but in everything said that the problem is a firewall problem; and it is not my case.
My configuration: the server PC is a Windows 7 PC, and the client PC too.
-192.168.2.58 is my private IP address (server).
-200.43.235.94 is my public static IP address (server).
server.ovpn file
# Which TCP/UDP port should OpenVPN listen on?
port 1194
proto udp
dev tap
dev-node TAP
ca ca.crt
cert Josecanalla.crt
key Josecanalla.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.2.58 255.255.255.0 192.168.2.60 192.168.2.70
server-bridge
;client-to-client
;duplicate-cn
keepalive 10 120
comp-lzo
;max-clients 100
persist-key
persist-tun
status openvpn-status.log
verb 3
client.ovpn file
dev tap
dev-node openVPN
remote 200.43.235.94 1194
ca ca.crt
cert Fede.crt
key Fede.key
#tls-auth ta.key 1
Log on Server PC
Thu Jan 16 17:03:25 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Thu Jan 16 17:03:25 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Jan 16 17:03:25 2014 Need hold release from management interface, waiting...
Thu Jan 16 17:03:25 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Jan 16 17:03:26 2014 MANAGEMENT: CMD 'state on'
Thu Jan 16 17:03:26 2014 MANAGEMENT: CMD 'log all on'
Thu Jan 16 17:03:26 2014 MANAGEMENT: CMD 'hold off'
Thu Jan 16 17:03:26 2014 MANAGEMENT: CMD 'hold release'
Thu Jan 16 17:03:26 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Jan 16 17:03:26 2014 Diffie-Hellman initialized with 1024 bit key
Thu Jan 16 17:03:26 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jan 16 17:03:26 2014 open_tun, tt->ipv6=0
Thu Jan 16 17:03:26 2014 TAP-WIN32 device [TAP] opened: \\.\Global\{4E0F6538-A224-405A-BC1C-C7110D73D325}.tap
Thu Jan 16 17:03:26 2014 TAP-Windows Driver Version 9.9
Thu Jan 16 17:03:26 2014 Sleeping for 10 seconds...
Thu Jan 16 17:03:36 2014 NOTE: FlushIpNetTable failed on interface [17] {4E0F6538-A224-405A-BC1C-C7110D73D325} (status=1168) : No se ha encontrado el elemento.
Thu Jan 16 17:03:36 2014 UDPv4 link local (bound): [undef]
Thu Jan 16 17:03:36 2014 UDPv4 link remote: [undef]
Thu Jan 16 17:03:36 2014 MULTI: multi_init called, r=256 v=256
Thu Jan 16 17:03:36 2014 IFCONFIG POOL: base=192.168.2.60 size=11, ipv6=0
Thu Jan 16 17:03:36 2014 ifconfig_pool_read(), in='Jose,192.168.2.60', TODO: IPv6
Thu Jan 16 17:03:36 2014 succeeded -> ifconfig_pool_set()
Thu Jan 16 17:03:36 2014 IFCONFIG POOL LIST
Thu Jan 16 17:03:36 2014 Jose,192.168.2.60
Thu Jan 16 17:03:36 2014 Initialization Sequence Completed
Thu Jan 16 17:03:36 2014 MANAGEMENT: >STATE:1389902616,CONNECTED,SUCCESS,,
Log on client PC
Thu Jan 16 16:23:11 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Thu Jan 16 16:23:11 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Jan 16 16:23:11 2014 Need hold release from management interface, waiting...
Thu Jan 16 16:23:11 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Jan 16 16:23:11 2014 MANAGEMENT: CMD 'state on'
Thu Jan 16 16:23:11 2014 MANAGEMENT: CMD 'log all on'
Thu Jan 16 16:23:12 2014 MANAGEMENT: CMD 'hold off'
Thu Jan 16 16:23:12 2014 MANAGEMENT: CMD 'hold release'
Thu Jan 16 16:23:12 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jan 16 16:23:12 2014 MANAGEMENT: >STATE:1389896592,RESOLVE,,,
Thu Jan 16 16:23:14 2014 RESOLVE: Cannot resolve host address: my-server-1: El nombre solicitado es válido pero no se encontraron datos del tipo solicitado.
Thu Jan 16 16:23:14 2014 MANAGEMENT: >STATE:1389896594,RESOLVE,,,
Thu Jan 16 16:23:17 2014 RESOLVE: Cannot resolve host address: my-server-1: El nombre solicitado es válido pero no se encontraron datos del tipo solicitado.
Thu Jan 16 16:23:17 2014 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 16 16:23:17 2014 MANAGEMENT: >STATE:1389896597,RECONNECTING,init_instance,,
Thu Jan 16 16:23:17 2014 Restart pause, 2 second(s)
Thu Jan 16 16:23:19 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jan 16 16:23:19 2014 UDPv4 link local: [undef]
Thu Jan 16 16:23:19 2014 UDPv4 link remote: [AF_INET]200.43.235.94:1194
Thu Jan 16 16:23:19 2014 MANAGEMENT: >STATE:1389896599,WAIT,,,
Thu Jan 16 16:23:19 2014 MANAGEMENT: >STATE:1389896599,AUTH,,,
Thu Jan 16 16:23:19 2014 TLS: Initial packet from [AF_INET]200.43.235.94:1194, sid=5c28b75b 959c44fd
Thu Jan 16 16:23:20 2014 VERIFY OK: depth=1, C=AR, ST=SF, L=GeneralLagos, O=Jose, OU=section, CN=Jose, name=Jose, emailAddress=XXXXXXXXXXXXXXXXXX
Thu Jan 16 16:23:20 2014 VERIFY OK: nsCertType=SERVER
Thu Jan 16 16:23:20 2014 VERIFY OK: depth=0, C=AR, ST=SF, L=GeneralLagos, O=Jose, OU=section, CN=Jose, name=Jose, emailAddress=XXXXXXXXXXXX
Thu Jan 16 16:23:21 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 16 16:23:21 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 16 16:23:21 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 16 16:23:21 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 16 16:23:21 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 16 16:23:21 2014 [Jose] Peer Connection Initiated with [AF_INET]200.43.235.94:1194
Thu Jan 16 16:23:22 2014 MANAGEMENT: >STATE:1389896602,GET_CONFIG,,,
Thu Jan 16 16:23:23 2014 SENT CONTROL [Jose]: 'PUSH_REQUEST' (status=1)
Thu Jan 16 16:23:23 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.2.58,ping 10,ping-restart 120,ifconfig 192.168.2.60 255.255.255.0'
Thu Jan 16 16:23:23 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Jan 16 16:23:23 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jan 16 16:23:23 2014 OPTIONS IMPORT: route-related options modified
Thu Jan 16 16:23:23 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jan 16 16:23:23 2014 MANAGEMENT: >STATE:1389896603,ASSIGN_IP,,192.168.2.60,
Thu Jan 16 16:23:23 2014 open_tun, tt->ipv6=0
Thu Jan 16 16:23:23 2014 TAP-WIN32 device [openVPN] opened: \\.\Global\{39841A9E-534B-48D9-BB5F-0919061EC84D}.tap
Thu Jan 16 16:23:23 2014 TAP-Windows Driver Version 9.9
Thu Jan 16 16:23:23 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.2.60/255.255.255.0 on interface {39841A9E-534B-48D9-BB5F-0919061EC84D} [DHCP-serv: 192.168.2.0, lease-time: 31536000]
Thu Jan 16 16:23:23 2014 NOTE: FlushIpNetTable failed on interface [17] {39841A9E-534B-48D9-BB5F-0919061EC84D} (status=1168) : No se ha encontrado el elemento.
Thu Jan 16 16:23:28 2014 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Thu Jan 16 16:23:28 2014 Initialization Sequence Completed
Thu Jan 16 16:23:28 2014 MANAGEMENT: >STATE:1389896608,CONNECTED,SUCCESS,192.168.2.60,200.43.235.94
NOTES
-The software firewall is disabled in two PCs.
-The router firewall in the server PC is disabled (the router of the client don't have firewall).
-In the router of the server PC, the port 1194 (UDP and TCP) is forwarding to the IP 192.168.2.58 which is configured static. The subnet mask is 255.255.255.0 and the default gateway 192.168.2.1 (the address of the router) and the DNS server 192.168.2.1
-I try to put the IP 192.168.2.58 in the DMZ zone of the router, but didn't work.
The connection is correctly stablished, as it see in the logs. But:
-If in the server PC I do on the cmd "ping 192.168.2.60" not works.
-If in the client PC I do on the cmd "ping 192.168.2.58" not works.
-I can't share files or anything else between PCs.
What can I do? Thanks!
