Hi,
I've been struggling for days with OpenVPN on Windows Server 2012.
I've been using the same configuration and certificates that are on my previous server (which was running really fine on Windows XP).
First at all, there is my current server configuration :
local 192.168.0.212
port 444
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
topology subnet
server 192.168.91.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
keepalive 10 120
cipher AES-128-CBC # AES
comp-lzo
max-clients 3
persist-key
persist-tun
status openvpn-status.log
verb 5
Port 444 in UDP has been set up to be forwarded to 192.168.0.212.
Windows Firewall on both interfaces has been completely disabled.
There goes my issue :
The first time I started OpenVPN on this server (W2k12), I was only able to steadily ping 192.168.91.1 (which is the VPN server in VPN subnet).
No matter what I did, I was NOT able to ping 192.168.0.212.
The route was successfully pushed to the client. It seemed that the IP forwarding between both interface didn't work.
After a few day of research, I found out I had to enable IP forwarding by adding a new role/functionnaly on the server (Routing and Remote access).
And voilĂ , there it goes, 192.168.0.212 is finally pingable....... but.... it is abnormally erratic !
Most of the time packet are dropped, sometimes ping are about 2-3s, and a few ping are normal (50ms).
Now I am lost. I tried to disable TLS, tried TCP instead (which gave me a lot of this error "MULTI: Outgoing TUN queue full, dropped packet len=xx"), tried another port, another IP range, but no lock.
I don't know what to do else......
Thanks for your help.