Hello,
We have a CentOS 6 system with OpenVPN to which Win7 OpenVPN GUI clients can connect to just fine. However when I try a Win8 client, it connects and I get an address but it won't ping anything the far side network. Nothing else seems to go through either.
Server version
# rpm -q openvpn
openvpn-2.3.2-2.el6.x86_64
#
Client version is
http://swupdate.openvpn.org/community/releases/openvpn-install-2.3.4-I603-x86_64.exe
/etc/openvpn/server.conf
port 1194
proto udp
dev tap0
mssfix 1200
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server-bridge 10.1.1.1 255.255.255.0 10.1.1.17 10.1.1.23
push "dhcp-option DNS 10.1.1.1"
push "dhcp-option DOMAIN customer.com"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status status
log-append /var/log/openvpn
verb 3
mute 20
/etc/openvpn/openvpn-startup
TUNNEL='tap0'
BRIDGE='br0'
LANFACE='eth0'
LANMASK='255.255.255.0'
LANIP='10.1.1.1'
LANCAST='10.1.1.255'
# Establish a bridged interface to use with Spanning Tree Protocol active
brctl addbr $BRIDGE
brctl stp $BRIDGE on
# Configure the physical interface and add to the bridge
ifdown $LANFACE > /dev/null 2>&1
ifconfig $LANFACE 0.0.0.0 promisc up
brctl addif $BRIDGE $LANFACE
# Configure the bridge with the proper ip address
ifconfig br0 $LANIP netmask $LANMASK broadcast $LANCAST
# Create the OpenVPN tunnel and add it to the bridge.
openvpn --mktun --dev tap0 > /dev/null 2>&1
ifconfig $TUNNEL 0.0.0.0 promisc up
brctl addif $BRIDGE $TUNNEL
exit
%programfiles%\OpenVPN\config\client.ovpn
client
dev tap
proto udp
remote <customer ip> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
comp-lzo
route-method exe
route-delay 2
verb 3
This is the basic connection we use at several customers and have for years. It has always worked fine. I have even used it with other Win8 machines although most of our connections are from Win7 and OS-X.
It seems to me that Win8 is preventing packet routing but I have no idea why or how to fix it.
If anyone could provide some insight about what is going on, I'd really appreciate it.
Thanks,
Cedric
