I have a Ubuntu server running OpenVPN behind a Netgear router which serves as my gateway. I have been trying to configure a bridged Road Warrior VPN for use with my Windows 7 laptop. Currently all internet traffic is being routed over the VPN and I can ping both the server and the router but when I try and ping one of my other computers (both running Windows 7) behind the router the request always times out. Whats odd is I can ping my two wifi-to-ethernet extenders just fine.
router ip:192.168.85.1
server ip:192.168.85.200
configurations below
ifconfig
br0 Link encap:Ethernet HWaddr 32:9a:ec:8e:ec:fa
inet addr:192.168.85.200 Bcast:192.168.85.255 Mask:255.255.255.0
inet6 addr: fe80::6ef0:49ff:fe13:268b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1179 errors:0 dropped:0 overruns:0 frame:0
TX packets:626 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:202680 (202.6 KB) TX bytes:218034 (218.0 KB)
eth0 Link encap:Ethernet HWaddr 6c:f0:49:13:26:8b
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:215055 errors:0 dropped:0 overruns:0 frame:0
TX packets:156612 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:61339876 (61.3 MB) TX bytes:48421323 (48.4 MB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:2366 errors:0 dropped:0 overruns:0 frame:0
TX packets:2366 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:160017 (160.0 KB) TX bytes:160017 (160.0 KB)
tap0 Link encap:Ethernet HWaddr 32:9a:ec:8e:ec:fa
inet6 addr: fe80::309a:ecff:fe8e:ecfa/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:616 errors:0 dropped:0 overruns:0 frame:0
TX packets:391 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:101290 (101.2 KB) TX bytes:162222 (162.2 KB)
iptables
Chain INPUT (policy ACCEPT 28 packets, 1400 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- tap0 * 0.0.0.0/0 0.0.0.0/0
34111 5907K ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- br0 eth0 0.0.0.0/0 0.0.0.0/0
30060 9945K ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 44133 packets, 16M bytes)
pkts bytes target prot opt in out source destination
Chain PREROUTING (policy ACCEPT 4416 packets, 384K bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 53 packets, 3716 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 493 packets, 34674 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 4772 packets, 404K bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 MASQUERADE all -- * eth0 192.168.85.0/24 0.0.0.0/0
Server.conf
local 192.168.85.200
port 1194
proto udp
dev tap0
dev tap0
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh2048.pem
tls-auth /etc/openvpn/keys/ta.key 0
cipher AES-256-CBC
comp-lzo
ifconfig-pool-persist ipp.txt
server-bridge 192.168.85.1 255.255.255.0 192.168.85.201 192.168.85.225
keepalive 10 120
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.85.1"
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3
Client.ovpn
client
dev tap
proto udp
remote [my.domain.com] 1194
resolv-retry infinite
nobind
ca "ca.crt"
cert "client.crt"
key "client.key"
tls-auth "ta.key" 1
remote-cert-tls server
cipher AES-256-CBC
comp-lzo
verb 5
I know there are a lot of similar posts out there but none matched my setup closely enough to correct the problem. Any help would be greatly appreciated.
