We have some people in our office who need to work remotely on occasion. There is software they need to be able to run at home, but that software requires resources from our network. I have been trying to setup OpenVPN with bridging. The server starts just fine it would seem. The client connects but the two computers are not able to see each other or even ping even though it says that openvpn is connected. I am pretty new to openvpn so, any help is greatly appreciated. Thank you in advance. Server Config: [code] port 1194 proto udp dev tap dev-node tap ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\server.crt" key "C:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem" server-bridge 192.168.0.135 255.255.255.0 192.168.0.20 192.168.0.30 ifconfig-pool-persist ipp.txt client-to-client keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 [/code] Client Config [code] client dev tap proto udp remote 69.92.77.32 1194 resolv-retry infinite nobind persist-key persist-tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\technician.crt" key "C:\\Program Files\\OpenVPN\\config\\technician.key" ns-cert-type server comp-lzo verb 3 [/code]

please describe what steps did you perfomed on your windows openvpn server. Michael.

I installed openvpn, generated my keys for server and the one client I am testing with. I moved the server keys to the config folder. Then I went into the sample server config and attempted to modified for a Bridged connection. I moved that to the config folder as well. I setup the config for the client and got that in place alongside the client keys on the client machine. I ran the OpenVPN gui and started the connection. It worked. I did the same on the client and it connected as well. However it seems to have trouble after a few seconds. Even when it does say connected I cannot ping between systems or perform any other interaction. Thanks for the help.

did you bridged lan & tap interface before starting openvpn? Michael.

Not the very first time no. I did the configuration and created the bridge before running it the second time.

On my client after the initial connection it keeps saying SENT CONTROL[ServerName]:'PUSH_REQUEST'(status=1). It keeps repeating that over and over. Hope this information is helpful. Thanks for the help.

I have been working on this like crazy. I now am to the point where both sides stay connected without any loss but they still cannot ping eachother. Here are the new configs: Server [code] port 1194 # you can specify a different port here proto udp # it's UDP channel (can be changed to tcp) dev tap # support for bridging mode ifconfig 192.168.0.135 255.255.255.0 # IP address of VPN server server-bridge 192.168.0.1 255.255.255.0 192.168.0.20 192.168.0.30 # line above specifies IP for 10 clients max-clients 10 # max 10 clients allowed client-to-client # if client may see others (can be omitted) keepalive 10 120 # checking connection (can be omitted) comp-lzo # enable LZO compression (can be omitted) mute 3 # hide repeating messages (after 3 reps) ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\server.crt" key "C:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem" ifconfig-pool-persist "C:\\Program Files\\OpenVPN\\config\\ipp.txt" # keep record of client=virtual IP address # Set log file verbosity. verb 3 [/code] Client [code] client # we're client remote # host name or IP address of VPN server port 1194 # you can specify a different port here proto udp # it's UDP channel (can be changed to tcp) dev tap # support for bridging mode (as per server) resolv-retry infinite # name resolution (can be omitted) nobind # do not bind to specific port (can be omitted) comp-lzo # enable LZO compression (can be omitted) mute 3 # hide repeating messages (after 3 reps) ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\technician.crt" key "C:\\Program Files\\OpenVPN\\config\\technician.key" # Set log file verbosity. verb 3 [/code] Sorry for all the posts. Thank you.

remove this from your server config [code]ifconfig 192.168.0.135 255.255.255.0 [/code] did you disable for testing any firewalls running on your windows server? btw which windows do you use? Michael.

[quote="maikcat"]remove this from your server config [code]ifconfig 192.168.0.135 255.255.255.0 [/code] did you disable for testing any firewalls running on your windows server? btw which windows do you use? Michael.[/quote] I have removed that line as you requested. I am two different windows 7 machines. One for client one for server. I have disabled the windows firewall on both ends. Still no luck as of today. For testing purposes I have been connecting the client to a broadband card so it can be on a separate network than the server. Would that cause a problem? Thanks for the help.

Quick update: I ran tcp dump and told my client to connect. I caught a lot of packets. That connection does seem to be going back and forth fine in that way. Instead of pinging I ran a traceroute. The traceroute started going out to servers on the internet. If the VPN tunnel is setup correctly it should just go straight to the server instead of showing me internet routes right? Thanks.

I have looked at many different forums and resources to no avail. I believe that if there is a solution to my problem it is in the mind of someone here. If anyone can help me I would greatly appreciate it.

Bridge configuration trouble

naviris

I am not sure it recognized that the TAP adapter was updated. Is there a good way to check that or even force the TAP adapter to update?

maikcat

the most easiest thing to do is uninstall and reinstall openvpn...

Michael.

naviris

All right, I plan on trying that, work is busy with some critical problems right now and I am going on a business trip this week. Once I am back I will let you know what happens. Thanks.

« Previous Page