pedropsousa
Hi guys,
We need to set up a VPN server so that our users may access our LAN and everything we have shared on it.
I've already setup the server, and clients. I can make a successfull connection from outside our LAN into the openVPN server, although, I am unable to ping whatever inside the Lan.
Let me scheme it down:
--LAN side--
Network: 192.168.1.0
Gateway: 192.168.1.19
openVPNserver: 192.168.1.14
some of our servers name: tidal,omicron,vpnserver,etc ...
server os: Debian v6.0.10
uname -a: Linux vpnserver 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux
our server.conf
local 192.168.1.14
port 1194
proto udp
dev tap0
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key # This file should be kept secret
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.1.14 255.255.255.0 192.168.1.191 192.168.1.199
push "route 192.168.1.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.1.19"
push "dhcp-option DOMAIN jaba.local"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 4
--Client side (outside lan)--
client
dev tap
proto udp
remote vpnserver 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
comp-lzo
verb 3
ping 10
os: Windows 7 / 8 / 8.1
output of "route print" on one windows 7 (with openVPN connected)
===========================================================================
Lista de interface
23...00 ff a0 8e 23 cf ......TAP-Windows Adapter V9
15...d0 50 99 2e 3f a9 ......Intel(R) Ethernet Connection (2) I218-V
1...........................Software Loopback Interface 1
16...00 00 00 00 00 00 00 e0 Placa Microsoft ISATAP
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
17...00 00 00 00 00 00 00 e0 Placa Microsoft ISATAP #2
===========================================================================
IPv4 Tabela de rotas
===========================================================================
Rotas activas:
Destino de rede M scara de rede Gateway Interface M‚trica
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.3 266
0.0.0.0 128.0.0.0 192.168.1.14 192.168.1.192 30
82.155.XX.XXX 255.255.255.255 192.168.1.1 192.168.1.192 30
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
128.0.0.0 128.0.0.0 192.168.1.14 192.168.1.192 30
192.168.1.0 255.255.255.0 On-link 192.168.1.3 266
192.168.1.0 255.255.255.0 On-link 192.168.1.192 286
192.168.1.0 255.255.255.0 192.168.1.14 192.168.1.192 30
192.168.1.3 255.255.255.255 On-link 192.168.1.3 266
192.168.1.192 255.255.255.255 On-link 192.168.1.192 286
192.168.1.255 255.255.255.255 On-link 192.168.1.3 266
192.168.1.255 255.255.255.255 On-link 192.168.1.192 286
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.3 266
224.0.0.0 240.0.0.0 On-link 192.168.1.192 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.3 266
255.255.255.255 255.255.255.255 On-link 192.168.1.192 286
===========================================================================
Rotas persistentes:
Endere‡o de rede M scara Endere‡o de gateway M‚trica
0.0.0.0 0.0.0.0 192.168.1.1 Predefini‡Æo
0.0.0.0 0.0.0.0 192.168.1.1 Predefini‡Æo
===========================================================================
The problem is, I need to get access to several samba shares on the openVPN server side. I cannot ping tidal server nor any other of the servers.
Let me know if you need anything else. Thank you.
Regards,
Pedro Sousa
