barney_5uk
Dear all
We are using OpenVPN over years, while in ist origin it was installed on an SBS 2003 together with applications, installed on the same Server, which could be used by the OpenVPN users without issues. Since we have moved from the SBS 2003 to SBS 2011, we had to install the Filemaker on another machine (because it cannot be installed on an SBS 2011) but since then, the OpenVPN users cannot use the Filemaker. Instead they get an error message that the Filemaker cannot open a certain file.
So I have recognized, when I connect via OpenVPN to the Server, I can ping the server as well as other machines on the same LAN, but I can only access shares and files on the server where OpenVPN is installed, not on other servers in the LAN.
As I follow
http://openvpn.net/index.php/open-source/documentation/howto.html#scope
"Expanding the scope of the VPN to include additional machines on either the client or server subnet.
Including multiple machines on the server side when using a routed VPN (dev tun)
Once the VPN is operational in a point-to-point capacity between client and server, it may be desirable to expand the scope of the VPN so that clients can reach multiple machines on the server network, rather than only the server machine itself.
For the purpose of this example, we will assume that the server-side LAN uses a subnet of 10.66.0.0/24 and the VPN IP address pool uses 10.8.0.0/24 as cited in the server directive in the OpenVPN server configuration file.
First, you must advertise the 10.66.0.0/24 subnet to VPN clients as being accessible through the VPN. This can easily be done with the following server-side config file directive:
push "route 10.66.0.0 255.255.255.0"
Next, you must set up a route on the server-side LAN gateway to route the VPN client subnet (10.8.0.0/24) to the OpenVPN server (this is only necessary if the OpenVPN server and the LAN gateway are different machines).
Make sure that you've enabled IP and TUN/TAP forwarding on the OpenVPN server machine."
I think I did what is described here.
My OpenVPN server config is:
local 192.168.1.11 (this is the servers IP adress)
port 1194
proto udp
replay-window 64 60
dev tun
ca C:\\OpenVPN\\ca.crt
cert C:\\OpenVPN\\server3.crt
key C:\\OpenVPN\\server3.key
dh C:\\Programme\\OpenVPN\\easy-rsa\\keys\\dh1024.pem
crl-verify C:\\Programme\\OpenVPN\\easy-rsa\\keys\\crl.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS 192.168.1.11"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
route-method exe
and my client config is
remote company.dyndns.org 1194
client
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
ca C:\\openvpn\\ca.crt
cert C:\\openvpn\\pml17n.crt
key C:\\openvpn\\pml17n.key
ns-cert-type server
comp-lzo
verb 3
I have also activated IP Forwarding on the OpenVPN Server via regedit
and I added this route to the router which is the Gateway to our LAN
Destination: 10.8.0.0 Subnet: 255.255.255.0 Gateway: 192.168.1.11 (the servers IP adress)
How is it possible to access shares and other resources in the LAN which are placed on other machines than the OpenVPN server?
Kind Regards
Bernard
barney_5uk
I have installed the File & Printer Sharing on all Network and TAP Adapters and when I can also resolve the machine's name with nslookup when I am connected via OpenVPN, then I would await that DNS is able to do open the connection for machines other than the OpenVPN server.
This is also the clients' ipconfig
Windows-IP-Konfiguration
Hostname . . . . . . . . . . . . : XYZ22
Primäres DNS-Suffix . . . . . . . : company.local
Knotentyp . . . . . . . . . . . . : Broadcast
IP-Routing aktiviert . . . . . . : Nein
WINS-Proxy aktiviert . . . . . . : Nein
DNS-Suffixsuchliste . . . . . . . : comlogos.local
Ethernet-Adapter LAN-Verbindung:
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : TAP-Windows Adapter V9
Physische Adresse . . . . . . . . : 00-FF-CD-AC-BB-72
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
IPv4-Adresse . . . . . . . . . . : 10.8.0.62(Bevorzugt)
Subnetzmaske . . . . . . . . . . : 255.255.255.252
Lease erhalten. . . . . . . . . . : Montag, 8. September 2014 14:01:52
Lease läuft ab. . . . . . . . . . : Dienstag, 8. September 2015 14:01:52
Standardgateway . . . . . . . . . :
DHCP-Server . . . . . . . . . . . : 10.8.0.61
DNS-Server . . . . . . . . . . . : 192.168.1.11
NetBIOS über TCP/IP . . . . . . . : Aktiviert
Drahtlos-LAN-Adapter WiFi:
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Intel(R) PRO/Wireless 3945ABG-Netzwerkverbindung
Physische Adresse . . . . . . . . : 00-1C-BF-55-4A-0E
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
Verbindungslokale IPv6-Adresse . : fe80::e4f8:8c00:7b11:6f98%12(Bevorzugt)
IPv4-Adresse . . . . . . . . . . : 192.168.1.76(Bevorzugt)
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Lease erhalten. . . . . . . . . . : Montag, 8. September 2014 12:14:16
Lease läuft ab. . . . . . . . . . : Montag, 15. September 2014 13:13:44
Standardgateway . . . . . . . . . : 192.168.1.2
DHCP-Server . . . . . . . . . . . : 192.168.1.2
DHCPv6-IAID . . . . . . . . . . . : 251665599
DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-1B-76-72-A1-00-1C-BF-55-4A-0E
DNS-Server . . . . . . . . . . . : 192.168.0.1
192.168.1.2
NetBIOS über TCP/IP . . . . . . . : Aktiviert
barney_5uk
Thanks for all
activating WINS is not the solution, that doesn't change nothing. regardless whether I use an UNC path \\machine or server\share or resource or \\machine.domain.local\share I cannot connect neither using WINS nor DNS. I think thisi s the root of the problem, because the application wants to open a file from a server other than the OpenVPN server, and cannot access that file.
I can set up the bridged OpenVPN connection, however I see no reason why this should not work in a tunnelled OpenVPN connection as I can ping the machines in the LAN and also resolve their names with DNS.
Kind regards
Bernard
barney_5uk
https://forums.openvpn.net/topic15837.html describes basically the same, so it should work over tun as well
I can ping the server and other machines in the LAN, and I can also resolve them with nslookup.
What I missed when I activated WINS, I did not push the WINS server with the DHCP options. I will try this later whether it works then.
Kind Regards
Bernard
barney_5uk
I have added the lines
push "dhcp-option WINS 192.168.1.11"
push "dhcp-option NBT 2"
but this didn't change nothing. I can still not open shares in the LAN from machines other than the OpenVPN Server.
barney_5uk
192.168.1.11 is DC, DNS Server, and WINS Server (since I activated WINS). And also the OpenVPN Server.
when connected with OpenVPN, net use will always work to connect a share on 192.168.1.11
but never to connect to a share on another Server in the same LAN, e.g. 192.168.1.27 - "path not found".
ping to 192.168.1.27 is successfull, and nslookup 192.168.1.27 gives the FQDN of that Server back.
When physically connected in the LAN (not using OpenVPN), net use works with 192.168.1.27
barney_5uk
the firewalls of the machines are disabled within the domain profile. I have also disabled the Firewalls for the private and public profiles of the machines to and from I try to open the share, but this didn't changed nothing.
barney_5uk
The Windows Firewall on the target machine is disabled.
barney_5uk
I have also taken a look on other experience reports about that issue with OpenVPN and Windows. Some reported, they had packet filters applied which had blocked Access to files and Shares, but I have no packet filters applied at all. I have also allowed anonymous access to shares and access to "anyone" in the local policies of the machines, still this doesn't provide the solution.
barney_5uk
I had all of the Windows Firewalls disabled on the OpenVPN server, on the target machine, and on the OpenVPN client machine. We have also no packet filters applied on any of these machines. I have also all resources enabled in the network settings of the machines, for all types of Networks. I have no further idea what might be wrong.
barney_5uk
well, then I will go ahead with Netmon & Wireshark and post the outcome here...
barney_5uk
I repeated all what we did before, while using the network monitor.
- I had the Windows firewalls disabled completely on the client, on the OpenVPN server and on the Filemaker server
- on the network monitor log, I see the traffic between the client machine (IP adress 10.8.0.x from the OpenVPN adress range) and the file server,
this traffic flows is in both directions, one after another. This is the traffic from the application on the Client, to connect to the Filemaker server
9407 16:11:10 05.09.2014 215.1536609 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:Flags=......S., SrcPort=61969, DstPort=5003, PayloadLen=0, Seq=1585712315, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:192, IPv4:191}
9408 16:11:10 05.09.2014 215.1537451 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61969, PayloadLen=0, Seq=1035483836, Ack=1585712316, Win=8192 ( Scale factor not supported ) = 8192 {TCP:192, IPv4:191}
9892 16:11:13 05.09.2014 218.1553047 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61969, PayloadLen=0, Seq=1035483836, Ack=1585712316, Win=8192 ( Scale factor not supported ) = 8192 {TCP:192, IPv4:191}
9893 16:11:13 05.09.2014 218.1810818 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #9407]Flags=......S., SrcPort=61969, DstPort=5003, PayloadLen=0, Seq=1585712315, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:192, IPv4:191}
9941 16:11:19 05.09.2014 224.1569687 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61969, PayloadLen=0, Seq=1035483836, Ack=1585712316, Win=8192 ( Scale factor not supported ) = 8192 {TCP:192, IPv4:191}
9942 16:11:19 05.09.2014 224.1971866 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #9407]Flags=......S., SrcPort=61969, DstPort=5003, PayloadLen=0, Seq=1585712315, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:192, IPv4:191}
10501 16:11:31 05.09.2014 236.2891593 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:Flags=......S., SrcPort=61973, DstPort=5003, PayloadLen=0, Seq=918800373, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:200, IPv4:191}
10502 16:11:31 05.09.2014 236.2892439 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61973, PayloadLen=0, Seq=3013356442, Ack=918800374, Win=8192 ( Scale factor not supported ) = 2097152 {TCP:200, IPv4:191}
10552 16:11:34 05.09.2014 239.2941169 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #10501]Flags=......S., SrcPort=61973, DstPort=5003, PayloadLen=0, Seq=918800373, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:200, IPv4:191}
10553 16:11:34 05.09.2014 239.2971937 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61973, PayloadLen=0, Seq=3013356442, Ack=918800374, Win=8192 ( Scale factor not supported ) = 2097152 {TCP:200, IPv4:191}
10593 16:11:40 05.09.2014 245.2983908 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61973, PayloadLen=0, Seq=3013356442, Ack=918800374, Win=8192 ( Scale factor not supported ) = 2097152 {TCP:200, IPv4:191}
10594 16:11:40 05.09.2014 245.3000577 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #10501]Flags=......S., SrcPort=61973, DstPort=5003, PayloadLen=0, Seq=918800373, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:200, IPv4:191}
10751 16:11:52 05.09.2014 256.7894708 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:Flags=......S., SrcPort=61976, DstPort=5003, PayloadLen=0, Seq=734589082, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:209, IPv4:191}
10752 16:11:52 05.09.2014 256.7895572 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61976, PayloadLen=0, Seq=1446145683, Ack=734589083, Win=8192 ( Scale factor not supported ) = 2097152 {TCP:209, IPv4:191}
10759 16:11:55 05.09.2014 259.7890654 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #10751]Flags=......S., SrcPort=61976, DstPort=5003, PayloadLen=0, Seq=734589082, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:209, IPv4:191}
10760 16:11:55 05.09.2014 259.7982763 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61976, PayloadLen=0, Seq=1446145683, Ack=734589083, Win=8192 ( Scale factor not supported ) = 2097152 {TCP:209, IPv4:191}
10792 16:12:01 05.09.2014 265.7904640 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61976, PayloadLen=0, Seq=1446145683, Ack=734589083, Win=8192 ( Scale factor not supported ) = 2097152 {TCP:209, IPv4:191}
10793 16:12:01 05.09.2014 265.7989457 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #10751]Flags=......S., SrcPort=61976, DstPort=5003, PayloadLen=0, Seq=734589082, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:209, IPv4:191}
11183 16:12:13 05.09.2014 277.8031282 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:Flags=......S., SrcPort=61977, DstPort=5003, PayloadLen=0, Seq=2481970487, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:229, IPv4:191}
11184 16:12:13 05.09.2014 277.8032103 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61977, PayloadLen=0, Seq=3961793075, Ack=2481970488, Win=8192 ( Scale factor not supported ) = 8192 {TCP:229, IPv4:191}
11197 16:12:16 05.09.2014 280.8013044 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #11183]Flags=......S., SrcPort=61977, DstPort=5003, PayloadLen=0, Seq=2481970487, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:229, IPv4:191}
11198 16:12:16 05.09.2014 280.8021909 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61977, PayloadLen=0, Seq=3961793075, Ack=2481970488, Win=8192 ( Scale factor not supported ) = 8192 {TCP:229, IPv4:191}
11398 16:12:22 05.09.2014 286.7982027 fmserver.exe 10.8.0.58 FMSERVER TCP TCP:[SynReTransmit #11183]Flags=......S., SrcPort=61977, DstPort=5003, PayloadLen=0, Seq=2481970487, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:229, IPv4:191}
11399 16:12:22 05.09.2014 286.8028755 fmserver.exe FMSERVER 10.8.0.58 TCP TCP:Flags=...A..S., SrcPort=5003, DstPort=61977, PayloadLen=0, Seq=3961793075, Ack=2481970488, Win=8192 ( Scale factor not supported ) = 8192 {TCP:229, IPv4:191}
- I ran also the Windows network analysis on the client machine, trying to open a shared folder on the Filemaker server, with this outcome:
"resource for file and print sharing on (target machine) in online but does not answer on connection requests"
"found problem - the remote machine does not answer on connections on port 445..." (translated from German language)
I think Windows on the Filemaker server blocks the requests, however the firewalls on the Windows machines were all disabled and the requests are still blocked.
barney_5uk
here is also the traffic from a try, to open a shared folder on the Filemaker server. The client's OpenVPN IP adress is here 10.8.0.66. Again, traffic flows in both directions, but the client still cannot open the resource on the FMSERVER. Firewalls were again disabled.
10314 11:53:45 16.09.2014 357.8645663 System 10.8.0.66 FMSERVER TCP TCP:Flags=......S., SrcPort=56660, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=4123990662, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:276, IPv4:275}
10315 11:53:45 16.09.2014 357.8646458 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56660, PayloadLen=0, Seq=3672785364, Ack=4123990663, Win=8192 ( Scale factor not supported ) = 8192 {TCP:276, IPv4:275}
10331 11:53:48 16.09.2014 360.8678145 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #10314]Flags=......S., SrcPort=56660, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=4123990662, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:276, IPv4:275}
10332 11:53:48 16.09.2014 360.8695199 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56660, PayloadLen=0, Seq=3672785364, Ack=4123990663, Win=8192 ( Scale factor not supported ) = 8192 {TCP:276, IPv4:275}
10450 11:53:54 16.09.2014 366.8839236 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #10314]Flags=......S., SrcPort=56660, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=4123990662, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:276, IPv4:275}
10451 11:53:54 16.09.2014 366.8854605 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56660, PayloadLen=0, Seq=3672785364, Ack=4123990663, Win=8192 ( Scale factor not supported ) = 8192 {TCP:276, IPv4:275}
10685 11:54:06 16.09.2014 378.8859931 System 10.8.0.66 FMSERVER TCP TCP:Flags=......S., SrcPort=56664, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=942213647, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:279, IPv4:275}
10686 11:54:06 16.09.2014 378.8860748 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56664, PayloadLen=0, Seq=3446161282, Ack=942213648, Win=8192 ( Scale factor not supported ) = 8192 {TCP:279, IPv4:275}
10705 11:54:09 16.09.2014 381.8852553 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #10685]Flags=......S., SrcPort=56664, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=942213647, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:279, IPv4:275}
10706 11:54:09 16.09.2014 381.9022226 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56664, PayloadLen=0, Seq=3446161282, Ack=942213648, Win=8192 ( Scale factor not supported ) = 8192 {TCP:279, IPv4:275}
10726 11:54:15 16.09.2014 387.8850877 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #10685]Flags=......S., SrcPort=56664, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=942213647, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:279, IPv4:275}
10727 11:54:15 16.09.2014 387.9025468 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56664, PayloadLen=0, Seq=3446161282, Ack=942213648, Win=8192 ( Scale factor not supported ) = 8192 {TCP:279, IPv4:275}
10791 11:54:27 16.09.2014 399.8874628 System 10.8.0.66 FMSERVER TCP TCP:Flags=......S., SrcPort=56669, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=2656544262, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:295, IPv4:275}
10792 11:54:27 16.09.2014 399.8875303 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56669, PayloadLen=0, Seq=1597102929, Ack=2656544263, Win=8192 ( Scale factor not supported ) = 8192 {TCP:295, IPv4:275}
11115 11:54:30 16.09.2014 402.8859147 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #10791]Flags=......S., SrcPort=56669, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=2656544262, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:295, IPv4:275}
11129 11:54:30 16.09.2014 402.9038061 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56669, PayloadLen=0, Seq=1597102929, Ack=2656544263, Win=8192 ( Scale factor not supported ) = 8192 {TCP:295, IPv4:275}
15259 11:54:36 16.09.2014 408.8861943 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #10791]Flags=......S., SrcPort=56669, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=2656544262, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192 {TCP:295, IPv4:275}
15260 11:54:36 16.09.2014 408.9042650 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=56669, PayloadLen=0, Seq=1597102929, Ack=2656544263, Win=8192 ( Scale factor not supported ) = 8192 {TCP:295, IPv4:275}
15878 11:54:50 16.09.2014 423.1672855 System 10.8.0.66 FMSERVER TCP TCP:Flags=......S., SrcPort=56687, DstPort=HTTP(80), PayloadLen=0, Seq=2077375913, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 {TCP:298, IPv4:275}
15879 11:54:50 16.09.2014 423.1673839 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=56687, PayloadLen=0, Seq=3852170315, Ack=2077375914, Win=8192 ( Scale factor not supported ) = 8192 {TCP:298, IPv4:275}
15883 11:54:53 16.09.2014 426.1692274 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #15878]Flags=......S., SrcPort=56687, DstPort=HTTP(80), PayloadLen=0, Seq=2077375913, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 {TCP:298, IPv4:275}
15884 11:54:53 16.09.2014 426.1866656 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=56687, PayloadLen=0, Seq=3852170315, Ack=2077375914, Win=8192 ( Scale factor not supported ) = 8192 {TCP:298, IPv4:275}
15911 11:54:59 16.09.2014 432.1851459 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #15878]Flags=......S., SrcPort=56687, DstPort=HTTP(80), PayloadLen=0, Seq=2077375913, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 {TCP:298, IPv4:275}
15912 11:54:59 16.09.2014 432.2028171 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=56687, PayloadLen=0, Seq=3852170315, Ack=2077375914, Win=8192 ( Scale factor not supported ) = 8192 {TCP:298, IPv4:275}
15954 11:55:11 16.09.2014 444.1869477 System 10.8.0.66 FMSERVER TCP TCP:Flags=......S., SrcPort=56689, DstPort=HTTP(80), PayloadLen=0, Seq=2557640502, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 {TCP:299, IPv4:275}
15955 11:55:11 16.09.2014 444.1870452 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=56689, PayloadLen=0, Seq=1655334772, Ack=2557640503, Win=8192 ( Scale factor not supported ) = 8192 {TCP:299, IPv4:275}
16086 11:55:14 16.09.2014 447.1858872 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #15954]Flags=......S., SrcPort=56689, DstPort=HTTP(80), PayloadLen=0, Seq=2557640502, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 {TCP:299, IPv4:275}
16087 11:55:14 16.09.2014 447.2038347 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=56689, PayloadLen=0, Seq=1655334772, Ack=2557640503, Win=8192 ( Scale factor not supported ) = 8192 {TCP:299, IPv4:275}
16112 11:55:20 16.09.2014 453.1870426 System 10.8.0.66 FMSERVER TCP TCP:[SynReTransmit #15954]Flags=......S., SrcPort=56689, DstPort=HTTP(80), PayloadLen=0, Seq=2557640502, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 {TCP:299, IPv4:275}
16113 11:55:20 16.09.2014 453.2198820 System FMSERVER 10.8.0.66 TCP TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=56689, PayloadLen=0, Seq=1655334772, Ack=2557640503, Win=8192 ( Scale factor not supported ) = 8192 {TCP:299, IPv4:275}
barney_5uk
this is also the traffic how it shows on the client in the Network Monitor:
23 12:34:16 16.09.2014 10.9447318 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
24 12:34:16 16.09.2014 10.9818485 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
26 12:34:16 16.09.2014 10.9829210 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
27 12:34:16 16.09.2014 11.0227066 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
86 12:35:12 16.09.2014 66.9043565 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
87 12:35:12 16.09.2014 66.9413162 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
89 12:35:12 16.09.2014 66.9424353 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
90 12:35:12 16.09.2014 66.9820026 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
256 12:37:32 16.09.2014 206.9865214 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
257 12:37:32 16.09.2014 207.0231858 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
259 12:37:32 16.09.2014 207.0242429 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
260 12:37:32 16.09.2014 207.0672042 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
364 12:38:28 16.09.2014 263.3479987 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
365 12:38:28 16.09.2014 263.3856831 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
367 12:38:28 16.09.2014 263.3865669 CLIENT.domain.local FMSERVER.domain.local ICMP ICMP:Echo Request Message, From 10.8.0.66 To 192.168.1.27 {IPv4:14}
368 12:38:28 16.09.2014 263.4253428 FMSERVER.domain.local CLIENT.domain.local ICMP ICMP:Echo Reply Message, From 192.168.1.27 To 10.8.0.66 {IPv4:14}
and also this - note, Netbios is enabled on the client and on the server's adapters
28 12:34:16 16.09.2014 11.0231855 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
32 12:34:17 16.09.2014 12.5164666 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
34 12:34:19 16.09.2014 14.0164709 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
91 12:35:12 16.09.2014 66.9823791 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
94 12:35:13 16.09.2014 68.4724826 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
96 12:35:15 16.09.2014 69.9725797 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
258 12:37:32 16.09.2014 207.0236820 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
266 12:37:33 16.09.2014 208.5105485 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
272 12:37:35 16.09.2014 210.0105971 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
318 12:37:56 16.09.2014 230.9352257 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
320 12:37:57 16.09.2014 232.4336783 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
323 12:37:59 16.09.2014 233.9337407 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
369 12:38:28 16.09.2014 263.4257265 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
372 12:38:30 16.09.2014 264.9194555 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
374 12:38:31 16.09.2014 266.4195368 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
393 12:38:55 16.09.2014 290.0949481 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
394 12:38:57 16.09.2014 291.5927060 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
399 12:38:58 16.09.2014 293.0927802 CLIENT FMSERVER.domain.local NbtNs NbtNs:Query Request for *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> <0x00> Workstation Service {UDP:23, IPv4:22}
barney_5uk
Hello
I was here in contact with someone whom I don't remember - he answered my posts but now all his answers have disappeared.
What might be wrong here ?
barney_5uk
Is there no way to go ahead with this discussion in any way?
Traffic
Hi
first of all .. be aware this forum does
not provide support for:
- Microsoft networking.
- Filemaker.
However,
barney_5uk wroteI can ping the server as well as other machines on the same LAN, but I can only access shares and files on the server where OpenVPN is installed, not on other servers in the LAN
It sounds like you have a problem with broadcast traffic, have you tried using
--server-bridge and
--dev tap which supports broadcasts, which
--server and
--dev-tun does not.
barney_5uk
Thanks, Traffic,
as far as I understand OpenVPN, I think dev-tun should do this as well. But I was also going ahead to set up the VPN connection with the router we are using. The router's VPN connection provides all shared resources of the network available, just the Filemaker still cannot open it's databases.
So I think we can assume that this issue is most likely an issue caused by the Filemaker itself - I would await, if dev-tap and server-bridge might open all of the shared ressources in the network, the Filemaker might still be unable to open it's own databases. But I will go ahead with this test only if I find some time for, because this needs to be redone from start.
I have also opened a ticket with the Filemaker support, if there is any outcome from them I will post it here.
Kind Regards
Bernard
