win VPN connects to Server but no other connection (ping)

dkindermann

Hi,

i have configured the openvpn server on a hyper-v windows 2012 standard server.
so the openvpn server service is running in the virtual machine running on windows 2012.
The client can connect to the server everything is fine.
but when i try to reach another server ip adress it is not working.
Client is started with administrator right.
i get the following error on the client side:
Thu Apr 09 15:22:51 2015 C:\WINDOWS\system32\route.exe ADD 192.168.0.1 MASK 255.255.255.0 192.168.50.5
Thu Apr 09 15:22:51 2015 Warning: address 192.168.0.1 is not a network address in relation to netmask 255.255.255.0
Thu Apr 09 15:22:51 2015 ROUTE: route addition failed using CreateIpForwardEntry: Falscher Parameter. [status=87 if_index=21]
Thu Apr 09 15:22:51 2015 Route addition via IPAPI failed [adaptive]
Thu Apr 09 15:22:51 2015 Route addition fallback to route.exe
Thu Apr 09 15:22:51 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Apr 09 15:22:51 2015 C:\WINDOWS\system32\route.exe ADD 192.168.50.0 MASK 255.255.255.0 192.168.50.5
Thu Apr 09 15:22:51 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Apr 09 15:22:51 2015 Route addition via IPAPI succeeded [adaptive]
Thu Apr 09 15:22:51 2015 C:\WINDOWS\system32\route.exe ADD 192.168.50.1 MASK 255.255.255.255 192.168.50.5
Thu Apr 09 15:22:51 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Apr 09 15:22:51 2015 Route addition via IPAPI succeeded [adaptive]
Thu Apr 09 15:22:51 2015 Initialization Sequence Completed
Thu Apr 09 15:22:51 2015 MANAGEMENT: >STATE:1428585771,CONNECTED,SUCCESS,192.168.50.6,84.72.207.218

does anyone know this error?
or any help?

Best regards,
Daniel

Traffic

Please see the Forum rules (top of page)

dkindermann wroteWarning: address 192.168.0.1 is not a network address in relation to netmask 255.255.255.0

you probably want 192.168.0.0 not .1

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

dkindermann

that helps...
now i can ping and connect to the server where the openvpn server is running, but no other servers in the subnet.... :-(

dkindermann

server conf:
port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret
crl-verify "C:\\Program Files\\OpenVPN\\config\\crl.pem"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 192.168.50.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
push "route 192.168.50.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4

client conf:
client
dev tun
proto udp
remote serverip 1394
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca_test.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client1.crt"
key "C:\\Program Files\\OpenVPN\\config\\client1.key"
ns-cert-type server
comp-lzo
verb 3

so connection works fine for the local ip, but no other ips in the server lan are available

Traffic

Please read this:
HOWTO: Expanding the scope of the VPN to include additional machines

Ensure you have configured this correctly:

The HOWTO wroteThe last step, and one that is often forgotten, is to add a route to the server's LAN gateway

Finally, check the firewalls for the machines you can not reach.