Couldn't listen on the network interface

deing

I setup a opevnpn server on windows,using bridge mode，and the connect from openvpn client suceed,I could access local network of server,and the client ip is in the same subnet of server.But when I run other service(such as apache,ftp) on client machine ,the service couldn't be listened on the ip which openvpn client got,when I use scantools scan the client ip address,nothing could be found. :oops:

The strange thing is that when I use the route mode,the client got a ip like 10.8.*.*,the service could be listened on the interface the openvpn client create. :!:

I'm puzzled, it's sure not the firewall problem.

Please help and forgive my poor English.

deing

Here is the server config:

port 1090
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server-bridge ip netmask  startip endip
push "route *.*.*.* 255.255.255.*"
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
comp-lzo
persist-key
persist-tun
verb

client config:

client
dev tap
proto udp
remote *.*.*.* 1090
;remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
comp-lzo
verb 3
route-delay

The problem is client could connect to server and got a correct ip ,but the ip just cannot be bind to run some service.

deing

Please someone help , I have googled lots of time and got nothing.

deing

debbie10t wrote
deing wroteI setup a opevnpn server on windows
What Operating system is your client ?

Windows7 64bit

deing

debbie10t wrote
deing wroteThe problem is client could connect to server and got a correct ip
Please post your log files to show that your client connection is successful.

deing wrotebut the ip just cannot be bind to run some service.
Please post netstat -a -n on the machine that you cannot bind to the TAP device.

I'm really really stupid. I mistake the ip address I got with another similar ip, That's why I got nothing when I run the portscan and couldn't visit the service. I didn't found it out until saw the result of 'netstat -an' order, Thank you!