Hello,
I have configured a Windows 2003 SBS computer as OpenVpn Server.
to clarify this is the IP setting of the server:
LAN: 172.31.202.2 / 24
OpenVpn: 10.8.0.1 / 24
Clients can connect to the server and ping the LAN IP address of the server, but I can't reach any other IP on the LAN network.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter is already set to 1 on the server. The Server doesn't have any firewall enabled.
I paste both config for server and client.
Server:
#################################################
local 172.31.202.2
port 1194
proto tcp
dev tun
<ca>
-----BEGIN CERTIFICATE-----
$$ REMOVED FOR SECURITY $$
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
$$ REMOVED FOR SECURITY $$
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
$$ REMOVED FOR SECURITY $$
-----END PRIVATE KEY-----
</key>
<dh>
-----BEGIN DH PARAMETERS-----
$$ REMOVED FOR SECURITY $$
-----END DH PARAMETERS-----
</dh>
server 10.8.0.0 255.255.255.0
ip-win32 manual
ifconfig 10.8.0.1 10.8.0.2
push "route 172.31.202.0 255.255.255.0"
push "dhcp-option DNS 172.31.202.1"
client-to-client
keepalive 10 30
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
script-security 3
auth-user-pass-verify "C:/Progra~1/OpenVPN/config/OpenVpnAd/OpenVpnAd.exe" via-env
Client (Remote IP has been replaced by A.B.C.D)
client
dev tun
proto tcp
remote A.B.C.D 1194
resolv-retry infinite
nobind
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----
$$ REMOVED FOR SECURITY $$
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
$$ REMOVED FOR SECURITY $$
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
$$ REMOVED FOR SECURITY $$
-----END PRIVATE KEY-----
</key>
ns-cert-type server
cipher DES-EDE3-CBC
comp-lzo
verb 3
auth-user-pass
auth-retry interact
Somebody can help me?
Thank yu in advance