Hi All,
New to the group. I was trying the "Shortest setup possible" from Chapter one of "OpenVPN 2 Cookbook" by Jan Just Keijser. I was able to get the tunnel to work right out the box with openVPN 2.3.4-I603-x86_64.exe on Windows 8.1 (client) and OpenVPN 2.3.2 i686-pc-linux-gnu on ubuntu 14.04LTS (Server).
However, when I attempted on the TAP setup it appeared there were issues on the Windows 8.1 machine.
The Code and result from the server side is:
root@andrew:~# openvpn --ifconfig 10.200.0.1 255.255.255.0 --dev tap
Sat Aug 9 11:21:49 2014 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Sat Aug 9 11:21:49 2014 ******* WARNING *******: all encryption and authentication features disabled -- all data will be tunnelled as cleartext
Sat Aug 9 11:21:49 2014 TUN/TAP device tap0 opened
Sat Aug 9 11:21:49 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Aug 9 11:21:49 2014 /sbin/ip link set dev tap0 up mtu 1500
Sat Aug 9 11:21:49 2014 /sbin/ip addr add dev tap0 10.200.0.1/24 broadcast 10.200.0.255
Sat Aug 9 11:21:49 2014 UDPv4 link local (bound): [undef]
Sat Aug 9 11:21:49 2014 UDPv4 link remote: [undef]
Sat Aug 9 11:24:31 2014 Peer Connection Initiated with [AF_INET]192.168.44.252:1194
Sat Aug 9 11:24:32 2014 Initialization Sequence Completed
Result:
root@andrew:~# ping 10.200.0.2
PING 10.200.0.2 (10.200.0.2) 56(84) bytes of data.
From 10.200.0.1 icmp_seq=9 Destination Host Unreachable
From 10.200.0.1 icmp_seq=10 Destination Host Unreachable
From 10.200.0.1 icmp_seq=11 Destination Host Unreachable
^C
--- 10.200.0.2 ping statistics ---
14 packets transmitted, 0 received, +3 errors, 100% packet loss, time 13095ms
pipe 3
root@andrew:~#
The code and results from the Windows 8.1 side is:
C:\Windows\system32>"\Program Files\OpenVPN\bin\openvpn.exe" --ifconfig 10.200.0
.2 255.255.255.0 --dev tap --remote andrew.fuller.net
Sat Aug 09 11:24:35 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO]
[PKCS11] [IPv6] built on Aug 7 2014
Sat Aug 09 11:24:35 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Sat Aug 09 11:24:35 2014 ******* WARNING *******: all encryption and authenticat
ion features disabled -- all data will be tunnelled as cleartext
Sat Aug 09 11:24:35 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Aug 09 11:24:35 2014 open_tun, tt->ipv6=0
Sat Aug 09 11:24:35 2014 TAP-WIN32 device [OpenVPNTap] opened: \\.\Global\{A9FA7
865-5A5F-4085-B6A8-ECE6FF9A3321}.tap
Sat Aug 09 11:24:35 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of
10.200.0.2/255.255.255.0 on interface {A9FA7865-5A5F-4085-B6A8-ECE6FF9A3321} [D
HCP-serv: 10.200.0.0, lease-time: 31536000]
Sat Aug 09 11:24:35 2014 Successful ARP Flush on interface [20] {A9FA7865-5A5F-4
085-B6A8-ECE6FF9A3321}
Sat Aug 09 11:24:35 2014 UDPv4 link local (bound): [undef]
Sat Aug 09 11:24:35 2014 UDPv4 link remote: [AF_INET]192.168.44.13:1194
Sat Aug 09 11:24:45 2014 Peer Connection Initiated with [AF_INET]192.168.44.13:1
194
Sat Aug 09 11:24:51 2014 Initialization Sequence Completed
Result:
C:\Windows\system32>ping 10.200.0.1
Pinging 10.200.0.1 with 32 bytes of data:
Reply from 10.200.0.2: Destination host unreachable.
Request timed out.
Ping statistics for 10.200.0.1:
Packets: Sent = 2, Received = 1, Lost = 1 (50% loss),
Control-C
^C
C:\Windows\system32>ping 10.200.0.1
Pinging 10.200.0.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 10.200.0.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Windows\system32>
And unable to use F4 on window to release openvpn. Reboot only way to unlock.
I did change the above code slightly with the same results as follows:
C:\Windows\system32>"\Program Files\OpenVPN\bin\openvpn.exe" --ifconfig 10.200.0
.2 255.255.255.0 --dev tap --dev-node "Ethernet 2" --remote andrew.fuller.net
Yet the tunnel side worked great, I did have to open the firewall on the windows 8.1 machine, but once done the tunnel allowed communication back and forth from the Windows 8.1 machine and the "andrew" Linux machine.
I, also, tried the above with the firewall on the windows 8.1 off. The "andrew" linux machine does not have a firewall, as it is inside our network only.
I did test with linux to linux and tap was successful. I am concern, I have done something incorrectly with the Windows 8.1 machine or that the Tap Program from OpenVPN has an issue, That is causing me this headache:-)
Any Thought or assistance would be appreciated.
Jim Fuller
