Hello, i configured OpenVPN on my Win7 using this guide - https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide But i'm not sure which IP i have to write in client.ovpn... [code]# The hostname/IP and port of the server. # You can have multiple remote entries # to load balance between the servers. remote 192.168.64.101 1194 ;remote my-server-2 1194[/code] Here is details of my network connection: [code]Connection-specific DNS Suffix . : Home IPv4 Address. . . . . . . . . . . : 192.168.64.101 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.64.1[/code] If i use IP - 192.168.64.101 then i get this error: [code]Fri Jan 30 12:25:59 2015 CreateFile failed on TAP device: \\.\Global\{46611EEB-B853-4714-8517-0A21B7104ACB}.tap Fri Jan 30 12:25:59 2015 MANAGEMENT: Client disconnected Fri Jan 30 12:25:59 2015 All TAP-Windows adapters on this system are currently in use. Fri Jan 30 12:25:59 2015 Exiting due to fatal error[/code] So i'm not sure which IP i have to assign to the client and make port forwarding on my router? I have static IP - wan ip 188.230.***.***

Ok, i did that... from "Routing all client traffic (including web-traffic) through the VPN" - (howto) Here is my server.ovpn [code]# If enabled, this directive will configure # all clients to redirect their default # network gateway through the VPN, causing # all IP traffic such as web browsing and # and DNS lookups to go through the VPN # (The OpenVPN server machine may need to NAT # or bridge the TUN/TAP interface to the internet # in order for this to work properly). ;push "redirect-gateway def1 bypass-dhcp" push "redirect-gateway def1"[/code] [code]# Certain Windows-specific network settings # can be pushed to clients, such as DNS # or WINS server addresses. CAVEAT: # http://openvpn.net/faq.html#dhcpcaveats # The addresses below refer to the public # DNS servers provided by opendns.com. ;push "dhcp-option DNS 208.67.222.222" ;push "dhcp-option DNS 208.67.220.220" push "dhcp-option DNS 10.8.0.1"[/code] This two lines are added: [b]push "redirect-gateway def1"[/b] [b]push "dhcp-option DNS 10.8.0.1"[/b] but now i can not browse on internet, my internet connection is down?

[quote="nedamime"]push "dhcp-option DNS [u]10.8.0.1[/u]"[/quote]is this server a DNS server or proxy ? Try using google DNS 8.8.8.8 & 8.8.4.4

Result of ipconfig /all: [code] Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TAP-Windows Adapter V9 Physical Address. . . . . . . . . : 00-FF-46-61-1E-EB DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 10.8.0.1(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.252 Lease Obtained. . . . . . . . . . : Friday, January 30, 2015 6:05:19 PM Lease Expires . . . . . . . . . . : Saturday, January 30, 2016 6:05:19 PM Default Gateway . . . . . . . . . : DHCP Server . . . . . . . . . . . : 10.8.0.2 DHCPv6 IAID . . . . . . . . . . . : 369164102[/code] [code]Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.64.105(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.64.1 DHCPv6 IAID . . . . . . . . . . . : 243319150 DNS Servers . . . . . . . . . . . : 192.168.64.1 NetBIOS over Tcpip. . . . . . . . : Disabled[/code] I'm trying to use DNS server not proxy.

Can't connect with client - IP address?

nedamime

Hello,

i configured OpenVPN on my Win7 using this guide - https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide

But i'm not sure which IP i have to write in client.ovpn...

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote 192.168.64.101 1194
;remote my-server-2 1194

Here is details of my network connection:

Connection-specific DNS Suffix  . : Home
IPv4 Address. . . . . . . . . . . : 192.168.64.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.64.1

If i use IP - 192.168.64.101 then i get this error:

Fri Jan 30 12:25:59 2015 CreateFile failed on TAP device: \\.\Global\{46611EEB-B853-4714-8517-0A21B7104ACB}.tap
Fri Jan 30 12:25:59 2015 MANAGEMENT: Client disconnected
Fri Jan 30 12:25:59 2015 All TAP-Windows adapters on this system are currently in use.
Fri Jan 30 12:25:59 2015 Exiting due to fatal error

So i'm not sure which IP i have to assign to the client and make port forwarding on my router?

I have static IP - wan ip 188.230.***.***

maikcat

post your configs used,

also your 7 is your client or your server?

are you trying to connect to yourself??

Michael.

nedamime

Client

client
dev tun
proto udp
remote 192.168.64.105 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\HP-PC.crt"
key "C:\\Program Files\\OpenVPN\\config\\HP-PC.key"
remote-cert-tls server
comp-lzo
verb 3

Server

port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

My server is on WIN7, and yes i was trying to connect to myself on same computer...

maikcat

if you need to connect to yourself you will need a second TAP adapter.

Michael.

nedamime

Thank you Michael 😃

In case if someone need it... i created second TAP adapter - START - %PROGRAMFILES%\Tap-Windows - bin (folder) - addtap.bat (run as administrator) and that's it.

nedamime

I will not open another topic, so i will ask here...

It seems that traffic doesn't go through OpenVPN, i'v checked with Wireshark and traffic is not encrypted, then i check tracert - and also does not go through vpn...

C:\Users\HP>tracert google.com

Tracing route to google.com [89.212.69.102]
over a maximum of 30 hops:

  1    <1 ms    <1 ms     1 ms  192.168.64.1

Route PRINT:

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.64.1   192.168.64.105    276
         10.8.0.0    255.255.255.0         10.8.0.2         10.8.0.1     20
         10.8.0.0  255.255.255.252         On-link          10.8.0.1    276
         10.8.0.1  255.255.255.255         On-link          10.8.0.1    276
         10.8.0.1  255.255.255.255         10.8.0.5         10.8.0.6     20
         10.8.0.3  255.255.255.255         On-link          10.8.0.1    276
         10.8.0.4  255.255.255.252         On-link          10.8.0.6    276
         10.8.0.6  255.255.255.255         On-link          10.8.0.6    276
         10.8.0.7  255.255.255.255         On-link          10.8.0.6    276
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.64.0    255.255.255.0         On-link    192.168.64.105    276
   192.168.64.105  255.255.255.255         On-link    192.168.64.105    276
   192.168.64.255  255.255.255.255         On-link    192.168.64.105    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link    192.168.64.105    276
        224.0.0.0        240.0.0.0         On-link          10.8.0.1    276
        224.0.0.0        240.0.0.0         On-link          10.8.0.6    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link    192.168.64.105    276
  255.255.255.255  255.255.255.255         On-link          10.8.0.1    276
  255.255.255.255  255.255.255.255         On-link          10.8.0.6    276

Currently i'm connected to myself / win7 where is also server (OpenVPN).

maikcat

if you want to access internet via openvpn server you will need to connect from
another workstation,
also you will need to enable NAT on your openvpn server,

user bebop has written a very nice howto with your case.

Michael.

nedamime

Ok, i did that... from "Routing all client traffic (including web-traffic) through the VPN" - (howto)

Here is my server.ovpn

# If enabled, this directive will configure
# all clients to redirect their default
# network gateway through the VPN, causing
# all IP traffic such as web browsing and
# and DNS lookups to go through the VPN
# (The OpenVPN server machine may need to NAT
# or bridge the TUN/TAP interface to the internet
# in order for this to work properly).
;push "redirect-gateway def1 bypass-dhcp"
push "redirect-gateway def1"

# Certain Windows-specific network settings
# can be pushed to clients, such as DNS
# or WINS server addresses.  CAVEAT:
# http://openvpn.net/faq.html#dhcpcaveats
# The addresses below refer to the public
# DNS servers provided by opendns.com.
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 10.8.0.1"

This two lines are added:

push "redirect-gateway def1"

push "dhcp-option DNS 10.8.0.1"

but now i can not browse on internet, my internet connection is down?

Traffic

nedamime wrotepush "dhcp-option DNS 10.8.0.1"

is this server a DNS server or proxy ?
Try using google DNS 8.8.8.8 & 8.8.4.4

nedamime

Result of ipconfig /all:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-46-61-1E-EB
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.8.0.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Lease Obtained. . . . . . . . . . : Friday, January 30, 2015 6:05:19 PM
   Lease Expires . . . . . . . . . . : Saturday, January 30, 2016 6:05:19 PM
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 10.8.0.2
   DHCPv6 IAID . . . . . . . . . . . : 369164102

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.64.105(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.64.1
   DHCPv6 IAID . . . . . . . . . . . : 243319150
   DNS Servers . . . . . . . . . . . : 192.168.64.1
   NetBIOS over Tcpip. . . . . . . . : Disabled

I'm trying to use DNS server not proxy.

maikcat

do you run DNS service on your openvpn server?

Michael

nedamime

I'm not sure, where can i check?

P.S. i'm new in this thing... :?

nedamime

I create everything what is mentioned here https://forums.openvpn.net/topic7806.html

server.ovpn

# in order for this to work properly).
;push "redirect-gateway def1 bypass-dhcp"
push "redirect-gateway def1"

and

;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 8.8.8.8"

client.ovpn

client
dev tun
proto udp
remote ip.of.win7.server 1194   

resolv-retry infinite
nobind
persist-key
persist-tun

ca ca.crt
cert client.crt
key client.key
ns-cert-type server

comp-lzo
verb 3
explicit-exit-notify 2
ping 10
ping-restart 60

route-method exe
route-delay 2

#last updated June 04, 2011

Also did all WIN7 tweaks... and tested from another computer, which is connected on my VPN server, no ERROR, but i can not use internet...

any idea?

nedamime

I figured out, that part of my connection doesn't work, but for example sykpe, viber works well, only browser doesn't work.

Any idea? I'm tired of trying to solve the problem.

maikcat

do a tracert 8.8.8.8 and post the output here...

Michael.

nedamime

C:\Users\HP>tracert 8.8.8.8

Tracing route to google-public-dns-a.google.com [8.8.8.8]
over a maximum of 30 hops:

  1     *        *        *     Request timed out.
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5  ^C

maikcat

did you added

push "redirect-gateway def1"

on your server?
also did you enabled ip forwarding on your server?
are you testing from ANOTHER pc?
post the output of

netstat -nr

on your client AFTER vpn is up.

Michael.

nedamime

Yes i added

push "redirect-gateway def1"

in my server.ovpn

i also did ip forwarding - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters - chaching value of IpEnableRouter --> 1

Yes. i'm testing from another pc...

Result of netstat -nr:

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0       93.103.0.1    93.103.58.223     25
          0.0.0.0        128.0.0.0         10.8.0.5         10.8.0.6     20
         10.8.0.1  255.255.255.255         10.8.0.5         10.8.0.6     20
         10.8.0.4  255.255.255.252         On-link          10.8.0.6    276
         10.8.0.6  255.255.255.255         On-link          10.8.0.6    276
         10.8.0.7  255.255.255.255         On-link          10.8.0.6    276
       93.103.0.0      255.255.0.0         On-link     93.103.58.223    281
    93.103.58.223  255.255.255.255         On-link     93.103.58.223    281
   93.103.255.255  255.255.255.255         On-link     93.103.58.223    281
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0         10.8.0.5         10.8.0.6     20
  188.230.255.164  255.255.255.255       93.103.0.1    93.103.58.223     25
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     93.103.58.223    281
        224.0.0.0        240.0.0.0         On-link          10.8.0.6    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     93.103.58.223    281
  255.255.255.255  255.255.255.255         On-link          10.8.0.6    276

nedamime

ok, i think i'm one step closer, now i have internet connection and i can surf with browser...

server.ovpn

push "redirect-gateway def1"

push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

client.ovpn

route-method exe
route-delay 2

route-gateway 192.168.64.1

this is what i added to client...

but now i see that traffic still doesn't go through OpenVPN...

tracert

Tracing route to google-public-dns-a.google.com [8.8.8.8]
over a maximum of 30 hops:

  1     *        *        *     Request timed out.
  2     4 ms     4 ms     3 ms  188-***-***-*.gw.t-*.net [188.***.***.*]

also checked with wireshark and i see traffic unencrypted...

maikcat

please remove the route-gateway from your client config.

if you setup RRAS right on your server to perform NAT it should working,

did you disable ANY firewalls running? (including antivirus firewalls)

sorry but i am not a MS guy..

Michael.