openvpn on windows 7 x64

blaser

I have been using openvpn server for years on windows XP and decided to move the server now to windows 7 64bit.
installed the latest version, copied the key / configuration, bridged the network and all good.
I noticed the following:
1) Log file is not being updated at all, although with the same configuration in windows XP it was updating.
2) Speed test from that computer is very slow, before bridging the network I have 100mbs, after bridging I have only 10mbs ( all tests to speedtest.net)
3) I'm using SSD drive so my open vpn didn't start correctly, I had to create a pre_xxx.bat file with the timeout command, that helped, anyway to increase the timeout inside openvpn from 10 to let's say 20 or 30?

Any ideas how to resolve it?

maikcat

which openvpn version are you using on your 7?

Michael.

blaser

version 2.3.6 64 bit.
I was able to solve the log by modifying the location where the log file is being saved but I still have the speed issue and question #3

maikcat

how exactly do you perform your speedtest? what you are measuring?

Michael.

blaser

I go to http://www.speedtest.net and run speedtest
before I bridged the network I had 100mbs download
after the bridge, I get less than 10mbs

maikcat

before I bridged the network I had 100mbs download

you perform the test on openvpn server itself?

are you using openvpn in bridging mode?

so you test via speedtest your internet connection on your server side and you get 100mbs,
then you bridge tap & lan , you rerun the test and you get 10?
are you running openvpn before 2nd test?

Michael.

blaser

maikcat wrote
before I bridged the network I had 100mbs download
you perform the test on openvpn server itself?

are you using openvpn in bridging mode?

so you test via speedtest your internet connection on your server side and you get 100mbs,
then you bridge tap & lan , you rerun the test and you get 10?
are you running openvpn before 2nd test?

Michael.

Yes to all the questions.
Even if I stop the vpn server the bridge still exists, my connection speed is 10mbs.
If I break the bridge I go back to 100mbs, but I need the bridge for the openvpn, right?

maikcat

why do you need to run openvpn in bridging mode?

Michael.

blaser

maikcat wrotewhy do you need to run openvpn in bridging mode?

Michael.

Good question, I copied my old configuration from windows XP.
I will try to remove the bridge.
Will I be able to still access the local network, not only the server?

Traffic

blaser wroteWill I be able to still access the local network, not only the server?

Unlikely until you setup all necessary routing .. Start here:
HOWTO: For OpenVPN Community Edition

Note: Windows Printer/File sharing will not work as you expect - in advance of that ..
In order to access windows printers and file shares over a routed tunnel you must use this:

net use x: \\ip.address.of.server\sharename (or printer name)

blaser

Traffic wrote
blaser wroteWill I be able to still access the local network, not only the server?
Unlikely until you setup all necessary routing .. Start here:
HOWTO: For OpenVPN Community Edition

Note: Windows Printer/File sharing will not work as you expect - in advance of that ..
In order to access windows printers and file shares over a routed tunnel you must use this:
net use x: \\ip.address.of.server\sharename (or printer name)

Thanks, I will try that.
Any ideas about the 10 second, how can I increase it?

Traffic

blaser wroteAny ideas about the 10 second, how can I increase it?

I presume you mean 10mb per second ...

Generally .. UDP is faster than TCP
TUN maybe faster than TAP
Buy a bigger internet pipe
Learn how OpenVPN works and adapt it to your specific environment

The variations of network setups are so vast as to make you query impossible to answer ..
Especially as you have broken the cardinal rule here on this forum:

Read the Rules: Post your configs and logs

Probably worth giving the HOWTO and Manual a shot as well ..

blaser

Traffic wrote
blaser wroteAny ideas about the 10 second, how can I increase it?
I presume you mean 10mb per second ...

Generally .. UDP is faster than TCP
TUN maybe faster than TAP
Buy a bigger internet pipe
Learn how OpenVPN works and adapt it to your specific environment

The variations of network setups are so vast as to make you query impossible to answer ..
Especially as you have broken the cardinal rule here on this forum:

Read the Rules: Post your configs and logs
Probably worth giving the HOWTO and Manual a shot as well ..

No, question #3 at the top.

Traffic

blaser wroteNo, question #3 at the top.

blaser wrote3) I'm using SSD drive so my open vpn didn't start correctly, I had to create a pre_xxx.bat file with the timeout command, that helped, anyway to increase the timeout inside openvpn from 10 to let's say 20 or 30?

Explain in detail as I have no idea what pre_xxx.bat does nor what "timeout" you imply ...

Once again:

Traffic wroteLearn how OpenVPN works

Traffic wroteProbably worth giving the HOWTO and Manual a shot

blaser

the pre_xxx.bat is a way to run a bat file before openvpn starts and you can do some stuff there.
My question, how can I increase the 10 sec highlighted below in red?

Tue Dec 30 23:31:25 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Tue Dec 30 23:31:25 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Tue Dec 30 23:31:25 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Dec 30 23:31:25 2014 Need hold release from management interface, waiting...
Tue Dec 30 23:31:25 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Dec 30 23:31:25 2014 MANAGEMENT: CMD 'state on'
Tue Dec 30 23:31:25 2014 MANAGEMENT: CMD 'log all on'
Tue Dec 30 23:31:25 2014 MANAGEMENT: CMD 'hold off'
Tue Dec 30 23:31:25 2014 MANAGEMENT: CMD 'hold release'
Tue Dec 30 23:31:25 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Tue Dec 30 23:31:25 2014 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Dec 30 23:31:25 2014 Diffie-Hellman initialized with 1024 bit key
Tue Dec 30 23:31:25 2014 Control Channel Authentication: using '..\easy-rsa\server-keys\ta.key' as a OpenVPN static key file
Tue Dec 30 23:31:25 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:31:25 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:31:25 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Dec 30 23:31:25 2014 open_tun, tt->ipv6=0
Tue Dec 30 23:31:26 2014 TAP-WIN32 device [TAP-WIN32] opened: \\.\Global\{E4672125-697C-4AFE-A19E-55789734AA14}.tap
Tue Dec 30 23:31:26 2014 TAP-Windows Driver Version 9.21
Tue Dec 30 23:31:26 2014 Sleeping for 10 seconds...
Tue Dec 30 23:31:36 2014 Listening for incoming TCP connection on [AF_INET]192.168.1.10:1123
Tue Dec 30 23:31:36 2014 TCPv4_SERVER link local (bound): [AF_INET]192.168.1.10:1123
Tue Dec 30 23:31:36 2014 TCPv4_SERVER link remote: [undef]
Tue Dec 30 23:31:36 2014 MULTI: multi_init called, r=256 v=256

Traffic

This is one of my windows clients not server .. but like this ?:

Wed Dec 31 18:40:21 2014 Set TAP-Windows TUN subnet mode network/local/netmask = 10.101.103.0/10.101.103.101/255.255.255.0 [SUCCEEDED]
Wed Dec 31 18:40:21 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.101.103.101/255.255.255.0 on interface {C4F6B475-59A1-498D-A11D-A64BB4BCBD5C} [DHCP-serv: 10.101.103.254, lease-time: 31536000]
Wed Dec 31 18:40:21 2014 Sleeping for 60 seconds...
etc...

See --happy new year in The Manual v23x

blaser

Traffic wroteThis is one of my windows clients not server .. but like this ?:

Wed Dec 31 18:40:21 2014 Set TAP-Windows TUN subnet mode network/local/netmask = 10.101.103.0/10.101.103.101/255.255.255.0 [SUCCEEDED]
Wed Dec 31 18:40:21 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.101.103.101/255.255.255.0 on interface {C4F6B475-59A1-498D-A11D-A64BB4BCBD5C} [DHCP-serv: 10.101.103.254, lease-time: 31536000]
Wed Dec 31 18:40:21 2014 Sleeping for 60 seconds...
etc...

See --happy new year in The Manual v23x

I'm using openvpn-gui to start the openvpn server and I do not think it has these command switches.
How did you manage to get 60 sec sleep?

blaser

I tried to follow the instructions and I can't get it to work anymore.
My vpn server is 192.168.1.10
my home router is 192.168.1.1
I gave the vpn client ip address 192.168.1.150 when connected
Before
I bridged the network tap to the local network and it worked fine.

Now
I broke the bridge followed the configuration and can't get any traffic to go through the tunnel.
Could you please post me a working configuration that doesn't need the bridging with my configuration?