sending traffic through OpenVPN

[deleted]

Hello,
I'm new with OpenVPN. I have a client successfully connected to OpenVPN server. I also put the command for routing traffic through VPN in configuration files.when OpenVPN is connected and I check the IP address of client in whatsmyipaddress.org, I see the IP address of the server appears. So, OpenVPN is connected, does this means that any traffic I send to server from client will pass through OpenVPN? I mean such as pinging server IP address or browsing a website located on the server?

server config:

local 192.227.x.x # server ip address
port 1194 # default port
proto udp #protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 1.2.3.0 255.255.255.0
#management 127.0.0.1 7505
push "redirect-gateway def1"
push "route 1.2.3.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key

Client Config:

client
dev tun
proto udp
remote 192.227.x.x 1194 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
redirect-gateway def1
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
reneg-sec 0
verb 3

Traffic

akram wrotedoes this means that any traffic I send to server from client will pass through OpenVPN?

That is basically what this is for:

akram wrotepush "redirect-gateway def1"

And as you are pushing it from the server there is no need to do the same in your client config ...

[deleted]

Thank you.
And I'm sending traffic from client to the server using ping and iperf tools. VPN assigns an IP address to the client. But when I do ping the client from the server there is no result and even no error. How should I ping the client from the server? Actually I need this to measure the latency of packets.

Traffic

akram wroteBut when I do ping the client from the server there is no result and even no error

Probably best if you also post your server and client OpenVPN logs.

Which client IP are you trying to ping ?

[deleted]

I tried to ping the IP address of the client which was assigned by VPN which is 1.2.3.6

Client log:

Thu Oct 16 03:37:22 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Thu Oct 16 03:37:22 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Thu Oct 16 03:37:22 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Oct 16 03:37:22 2014 Need hold release from management interface, waiting...
Thu Oct 16 03:37:22 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Oct 16 03:37:23 2014 MANAGEMENT: CMD 'state on'
Thu Oct 16 03:37:23 2014 MANAGEMENT: CMD 'log all on'
Thu Oct 16 03:37:23 2014 MANAGEMENT: CMD 'hold off'
Thu Oct 16 03:37:23 2014 MANAGEMENT: CMD 'hold release'
Thu Oct 16 03:37:36 2014 MANAGEMENT: CMD 'username "Auth" "vpnuser1"'
Thu Oct 16 03:37:36 2014 MANAGEMENT: CMD 'password [...]'
Thu Oct 16 03:37:36 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Oct 16 03:37:37 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Oct 16 03:37:37 2014 UDPv4 link local: [undef]
Thu Oct 16 03:37:37 2014 UDPv4 link remote: [AF_INET]192.227.x.x:1194
Thu Oct 16 03:37:37 2014 MANAGEMENT: >STATE:1413455857,WAIT,,,
Thu Oct 16 03:37:37 2014 MANAGEMENT: >STATE:1413455857,AUTH,,,
Thu Oct 16 03:37:37 2014 TLS: Initial packet from [AF_INET]192.227.x.x:1194, sid=79454be2 aea55e90
Thu Oct 16 03:37:37 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Oct 16 03:37:38 2014 VERIFY OK: depth=1, C=MY, ST=CA, L=SanFrancisco, O=UKM, OU=FTSM, CN=iinetwork.org, name=Akram, emailAddress=kargar2013@gmail.com
Thu Oct 16 03:37:38 2014 VERIFY OK: depth=0, C=MY, ST=CA, L=SanFrancisco, O=UKM, OU=FTSM, CN=iinetwork.org, name=Akram, emailAddress=kargar2013@gmail.com
Thu Oct 16 03:37:38 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 16 03:37:38 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 16 03:37:38 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 16 03:37:38 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 16 03:37:39 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Oct 16 03:37:39 2014 [iinetwork.org] Peer Connection Initiated with [AF_INET]192.227.165.153:1194
Thu Oct 16 03:37:40 2014 MANAGEMENT: >STATE:1413455860,GET_CONFIG,,,
Thu Oct 16 03:37:41 2014 SENT CONTROL [iinetwork.org]: 'PUSH_REQUEST' (status=1)
Thu Oct 16 03:37:41 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 1.2.3.0 255.255.255.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 1.2.3.1,topology net30,ping 5,ping-restart 30,ifconfig 1.2.3.6 1.2.3.5'
Thu Oct 16 03:37:41 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Oct 16 03:37:41 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Oct 16 03:37:41 2014 OPTIONS IMPORT: route options modified
Thu Oct 16 03:37:41 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Oct 16 03:37:41 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 16 03:37:41 2014 MANAGEMENT: >STATE:1413455861,ASSIGN_IP,,1.2.3.6,
Thu Oct 16 03:37:41 2014 open_tun, tt->ipv6=0
Thu Oct 16 03:37:41 2014 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{E93D8523-1486-4303-9959-478DA6469597}.tap
Thu Oct 16 03:37:41 2014 TAP-Windows Driver Version 9.9 
Thu Oct 16 03:37:41 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 1.2.3.6/255.255.255.252 on interface {E93D8523-1486-4303-9959-478DA6469597} [DHCP-serv: 1.2.3.5, lease-time: 31536000]
Thu Oct 16 03:37:41 2014 Successful ARP Flush on interface [17] {E93D8523-1486-4303-9959-478DA6469597}
Thu Oct 16 03:37:46 2014 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Thu Oct 16 03:37:46 2014 C:\Windows\system32\route.exe ADD 192.227.x.x MASK 255.255.255.255 192.168.0.1
Thu Oct 16 03:37:46 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Thu Oct 16 03:37:46 2014 Route addition via IPAPI succeeded [adaptive]
Thu Oct 16 03:37:46 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 1.2.3.5
Thu Oct 16 03:37:46 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 16 03:37:46 2014 Route addition via IPAPI succeeded [adaptive]
Thu Oct 16 03:37:46 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 1.2.3.5
Thu Oct 16 03:37:46 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 16 03:37:46 2014 Route addition via IPAPI succeeded [adaptive]
Thu Oct 16 03:37:46 2014 MANAGEMENT: >STATE:1413455866,ADD_ROUTES,,,
Thu Oct 16 03:37:46 2014 C:\Windows\system32\route.exe ADD 1.2.3.0 MASK 255.255.255.0 1.2.3.5
Thu Oct 16 03:37:46 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 16 03:37:46 2014 Route addition via IPAPI succeeded [adaptive]
Thu Oct 16 03:37:46 2014 C:\Windows\system32\route.exe ADD 1.2.3.1 MASK 255.255.255.255 1.2.3.5
Thu Oct 16 03:37:46 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Oct 16 03:37:46 2014 Route addition via IPAPI succeeded [adaptive]
Thu Oct 16 03:37:46 2014 Initialization Sequence Completed
Thu Oct 16 03:37:46 2014 MANAGEMENT: >STATE:1413455866,CONNECTED,SUCCESS,1.2.3.6,192.227.x.x