marsss Hi, i am not that good in setting up things... i was using the default configs along with the openvpn manual for setting up server and clients. then copied the client files to my client machine at home. i can now connect to the server, the server log and client log seem to be ok and i get an ip (getting the default ip range that was in the sample configs) the problem is i can not connect to an machine in the vpn network e.g. the server in the vpn server network. it is a windows 2012 server. windows firewall is off. i forwarded udp/tcp 1194 to the server in router. on an iPad i can connect also, everything seems fine, i try to connect to the servermachine and get a loginscreen (using filebrowser lite), but then it just errors out. with no explanation. what i am doing wrong? thank you
marsss client: client dev tun proto udp remote (my static ip of server here) 1194 resolv-retry infinite nobind persist-key persist-tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\client.crt" key "C:\\Program Files\\OpenVPN\\config\\client.key" remote-cert-tls server comp-lzo verb 3 server: port 1194 proto udp dev tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\server.crt" key "C:\\Program Files\\OpenVPN\\config\\server.key" dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem" server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 ... pretty much default, with just a few things changed, like told in the manual. if you want to know anything else, please do ask. thanks
Traffic In order to achieve your goal you will need to read and implement this: HOWTO: Expanding the scope of the VPN to include additional machines
marsss thank you! that did the trick... i also had a bluescreen with ndis.sys, which i resolved by uninstalling AVM VPN Software. now my server (which is also the machine OpenVPN Server is running on) also is the gateway. IP 192.168.1.1 i pushed the route to 192.168.1.x now i can connect to it by ip address, but connecting by machine name (e.g. \\server01 in explorer) fails also a question. with that ip range, will i run into great problems from other client networks that use similar ip ranges?
marsss Thank you, that did the trick Is there a way to forward DNS names? Or a way so that clients in external network can use \\share name instead of IP adresses? With server2012 PPTP VPN (that i had before) it worked ok. On both PC and IPad. Now, it doesnt work 50% of the time on PC, like i hit put \\share in explorer and get an error, then hit enter again and it works, then again it doesnt. On IPad it doesnt work at all with \\share name. Only IP yet. i tried pushing the DNS server in server.conf. the windows server is 192.168.1.1 the VPN has default 10.8.0.0 server network DNS server is also 192.168.1.1 thanks for any help.
Traffic From the rules: If you are using tap only for windows file sharing, look into running a WINS server instead. Also, see Ethernet Bridging
