Hey guys,
I'm trying to get my new network set up (pretty new to this), and having some issues. My client can connect to my server, and I can ping the server from the client, but I cannot ping any other computers on the LAN network. I figure it has something to do with not setting up the routes properly, but I'm not sure. Server and client are both running on Windows. I set all this up based on the
Easy Windows Guide.
Set-up:
- Router as LAN gateway (running DD-WRT firmware)
- OpenVPN server (Windows Server 2012 R2) is behind router
- OpenVPN port is forwarded to server through router
What I'm not sure about:
- the
HOWTO says "Next, you must set up a route on the server-side LAN gateway to route the VPN client subnet (10.8.0.0/24) to the OpenVPN server (this is only necessary if the OpenVPN server and the LAN gateway are different machines)." The router (i.e. the gateway) has a "static routing" page with the following options: Metric, Destination LAN NET, Subnet Mask, Gateway. Which IPs go in which boxes?
- the HOWTO also mentions "Make sure that you've enabled IP and TUN/TAP forwarding on the OpenVPN server machine." How do I do this on a Windows machine? The firewall is already disabled.
- my LAN network uses Windows Active Directory for domain control. Is there a way for my OpenVPN client to log in as a domain user?
Server config:
port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.198.1.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.198.0.0 255.255.255.0"
push "dhcp-option WINS 10.198.0.2"
push "dhcp-option DNS 10.198.0.2"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
Client Config:
client
dev tun
proto udp
remote something.domain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client.crt"
key "C:\\Program Files\\OpenVPN\\config\\client.key"
ns-cert-type server
comp-lzo
verb 3
Suggestions as to what I'm missing would be highly appreciated.
