[Resolve] Client ping linux vm (bridged) but not windows 7

justinwol

I am able to access the LAN resources from Linux/Windows/OSX clients, except for a windows 7 machine that is hosting two linux VM's. I can access the two VM's (bridged), but not the windows 7 host.

I have an openvpn server (linux) configured using tun/routing on a linux gateway with appropriate routes to my local LAN.

VPN 10.8.0.0/24
LAN 10.0.0.0/24

My guess may be a firewall conflict on the windows 7 client, but I'm not sure how the firewall might the cause as my gateway iptables are configured correctly. However my knowledge of all this is still very limited. Thank you for any help.

server.conf

port 1194
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key
dh dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "route 10.0.0.0 255.255.255.0"
push "dhcp-option DNS 10.0.0.1"
push "dhcp-option DOMAIN internal.sensar.ca"

keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun

status openvpn-status.log
verb 3

client.conf

dev tun
proto udp
remote my.server.org 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

justinwol

Sorry, I was unclear. I cannot ping the windows 7 machine, the fact that I can ping the vm's is incidental information, I thought relevant only because they are linux guests, but sounds like it is irrelevant.

I have other linux servers (physical NICs) on my LAN that I can ping/access fine. Without the vm's running, I still cannot ping the windows 7 machine.

To simplify the problem, I merely cannot ping a windows 7 machine on my LAN, while I can ping linux machines on my LAN. I assume that this is within the scope of these forums?

Thanks.

justinwol

You cannot ping a machine on your LAN .. how exactly is this anything to do with OpenVPN ?

I am able to access the LAN resources from Linux/Windows/OSX clients, except for a windows 7 machine

Sorry, I should have specified that this was from OpenVPN clients on Linux/Windows/OSX machines.

I have no trouble pinging within my own LAN. In other words, I'm trying to use route pushing to access a LAN behind my OpenVPN server. I've been partially successful, that is, I can access Linux machines - through my OpenVPN client - but not this particular windows machine.

I was under the impression that it was a supported feature of OpenVPN, with proper configuration, to allow clients to connect to a different subnet, i.e. a local LAN behind the OpenVPN server, through route pushing (it currently has this feature, but is not supported here as I now understand, my apologies).

Thank you for the specific firewall suggestion. I had not thought to try the entire 10.8.0.x network and will take this problem elsewhere.

justinwol

For my application I do not want client-client sharing, only vpn client access to a particular subnet.

I found the problem. Thank you for helping me take a closer look at the firewall. I found that the default remote address rules for ICMPv4 echo request and port 445 (filesharing) were set to local only. So I merely needed to recreate these rules and open them to OpenVPN's network.

Thanks very much, sorry for the trouble.