jprice1985
Hi, I'm new to openVPN-TUN, but have worked with TAP previously, however mobile connections need TUN thus why I am attempting a TUN connection.
I am having problems getting a two way connection working, getting now pinging either end of the connection, but am able to ping the assigned address.
Server Configuration File:
;local a.b.c.d
port 15151
proto tcp-server
;proto udp
;dev tap
dev tun
;dev-node MyTap
dev-node OpenVPN-TUN
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret
mode server
tls-server
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.240
;ifconfig-pool-persist ipp.txt
;server-bridge
push "route 192.168.1.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1"
;push "dhcp-option DNS 8.8.8.8"
;push "dhcp-option DNS 208.67.220.220"
client-to-client
duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
;max-clients 100
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 3
;mute 20
Client Config:
client
tls-client
;dev tap
dev tun
dev-node OpenVPN
proto tcp
;proto udp
remote [servername] 15151
;remote my-server-2 1194
;remote-random.
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca "C:\\OpenVPN\\config\\ca.crt"
cert "C:\\OpenVPN\\config\\jason-workpc.crt"
key "C:\\OpenVPN\\config\\jason-workpc.key"
ns-cert-type server
;tls-auth ta.key 1
;cipher x
;comp-lzo
verb 3
;mute 20
Routing Table (Server):
Network Destination Netmask Gateway Interface Metric
10.8.0.0 255.255.255.240 10.8.0.2 10.8.0.1 30
10.8.0.0 255.255.255.252 On-link 10.8.0.1 286
10.8.0.1 255.255.255.255 On-link 10.8.0.1 286
10.8.0.3 255.255.255.255 On-link 10.8.0.1 286
Route Table (Client):
Network Destination Netmask Gateway Interface Metric
10.8.0.0 255.255.255.240 10.8.0.5 10.8.0.6 30
10.8.0.4 255.255.255.252 On-link 10.8.0.6 286
10.8.0.6 255.255.255.255 On-link 10.8.0.6 286
10.8.0.7 255.255.255.255 On-link 10.8.0.6 286
It appears to me to be an incorrect ip assignment when the line: server 10.8.0.0 255.255.255.240 is used has anybody managed to find a way of fixing this in a Windows based environment?
I have tried many different services with no information being able to be transferred across the link.
jprice1985
This I had tried, however I have the same result unfortunately, it seems that the windows version maybe somewhat broken. If anybody has managed to get it functioning I would be most gratified.
Thanks
jprice1985
Been running tests again today, and I find that I am still unable to get anything working here. If anybody has any news on this issue please do post.
would be great to get this working, as it would be really great to get SIP working through openVPN on the android phone over a public network (only allows http/s traffic)
