openVPN server - SMB shares

nem2k

I have a windows 8.1 machine setup with openvpn server by following the instructions here: https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide

My windows 8.1 client laptop can connect to the server no problem, but I can't seem to access any of the SMB shares. My server has a local ip of 192.168.1.50, and when I ping that on my client laptop I get timeouts

I also cannot access the shares by going to \\NAS\\Media or \\192.168.1.50\Media

This is my openvpn server config file:

  
    port 1194
    proto udp
    dev tun
    ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
    cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
    key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key"
    dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"
    server 10.8.0.0 255.255.255.0
    ifconfig-pool-persist ipp.txt
    keepalive 10 120
    comp-lzo
    persist-key
    persist-tun
    status openvpn-status.log
    verb 3

Is there any other setup I need to do to be able to access the shares on the server?

Some other information that may be of relevance:

1. the certificate I'm using on the server for openvpn is self-signed

2. The server also runs nginx using a signed SSL certificate

3. I have a domain name which I access the server with, updated with ddns by the router

4. The openvpn port (1194) has been opened on the router and forwards to the server machine

As a side question: is it possible to get openvpn to use my signed SSL certificate instead of a self-signed one?

maikcat

you need the following:

1)enable ip forwarding on your openvpn server
2)add a push route statement in your server config so your clients know where to route traffic destined to your servers side lan
3)configure firewalls to allow traffic from vpn tunnel

Michael.

nem2k

I see

So would a push route be something like: push "route 192.168.1.50 255.255.255.0" if I wanted vpn clients to be able to access smb shares on the 192.168.1.50 machine?

also, how do I enable ip forwarding on a windows 8 server? I checked this page but the link doesn't seem to work: https://openvpn.net/index.php/open-source/faq/77-server/265-how-do-i-enable-ip-forwarding.html

maikcat

So would a push route be something like: push "route 192.168.1.50 255.255.255.0"

use

push "route 192.168.1.0 255.255.255.0"

push "route 192.168.1.50 255.255.255.255"

for ip forwarding you do need to reboot your server after adding the registry key..

Michael.

Traffic

nem2k wrotecannot access the shares by going to \\NAS\\Media or \\192.168.1.50\Media

You can try \\10.8.0.1\Media

Also:

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

nem2k

ah, is it possible to change my subnet address to something less common?

Traffic

Change the network by configuring your LAN router. (Not openvpn)