Hi, I'm quite new to network administration, but I have a basic understanding of it. I want to realize a VPN Server, to which my friends and I can connect in order to play some old[b] LAN games[/b] together. (e.g. Age of Empires ;)) So here is my problem. I hope you can help me!: I've tried to gather some information and it seems that I need a [b]tap connection[/b], because I want [b]broadcasts[/b] to be transfered via the VPN. I don't need to use bridging, because every client connects to the VPN and only clients in the VPN should play together. I've read that it's enough to establish a normal tap conenction. I have a Windows V-Server on a public IP, so it isn't in my private LAN. [b]I was able to establish a connection via the VPN and the TAP Adapter. [/b]Clients can ping eachother, so that's fine too. My problem is, that none of the clients has a [b]default gateway[/b]. That's why I cannot set the network in windows as a private home network (it's a Public network by default). And that's why we can't use Windows network features like File Sharing. Moreover, some games seem to require a private home network in order to work via LAN. It would also be nice, if users could access the internet via the VPN connection and use the IP of the server. With a tun connection I was able to realize that via "redirect-gateway def1" but in my tap connection it doesn't work. That was the description of my problem :] Here are my config files and my setup: [b]Setup:[/b] [code]VServer: Runs OpenVPN Server.... Public-IP: 80.xxx.xxx.xxx , OpenVPN IP: 10.8.1.1 Mask 255.255.255.0 Multiple clients, all connected to the VPN : OpenVPN IP: 10.8.1.10....... 10.8.1.100 The OpenVPN network should be used for LAN Gaming. (I've read that this setup is called Multi-Singlepoint setup)[/code] Server Config: [code] proto udp dev tap port 1195 dev-node "Ethernet 3" ca "ca.crt" cert "server.crt" key "server.key" dh "dh1024.pem" ifconfig 10.8.1.1 255.255.255.0 80.xxx.xxx.xxx ifconfig-pool-persist ipp2.txt server-bridge 10.8.1.0 255.255.255.0 10.8.1.10 10.8.1.100 client-to-client keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 [/code] Client config: [code] client dev tap proto udp remote 80.xxx.xxx.xxx 1195 resolv-retry infinite nobind persist-key persist-tun ca "ca.crt" cert "user.crt" key "user.key" remote-cert-tls server comp-lzo verb 3 route-metric 1 [/code] I've also started the Windows RAS service and I have set up NAT between the network adapter with the public IP and the OpenVPN adapter. I'm quite sure that the routing is my problem, but as I said I haven't done a lot of network administration and could use some help. Oh..and another short question: Is it a good idea to set the metric to 1? As far as I can understand it's some kind of "priority" which network conenction should be used, so I thought setting it to 1 will force the game to use this network connection if it's looking for games. Thank you in advance! Have a nice day, Wolfgang

[quote="wolfgangonline"]ifconfig 10.8.1.1 255.255.255.0 80.xxx.xxx.xxx[/quote]Remove this line completely .. Also,[quote="wolfgangonline"]I don't need to use bridging[/quote]however,[quote="wolfgangonline"]server-bridge 10.8.1.0 255.255.255.0 10.8.1.10 10.8.1.100 [/quote]how have you configured your server network (ipconfig /all) ? [quote="wolfgangonline"]My problem is, that none of the clients has a default gateway[/quote]actually they all have a default gateway and windows does not allow you to mess about with it (thanks microsoft) however, you can manually configure windows firewall to allow all vpn packets to pass over the vpn ..

LAN Game-VPN - missing gateway

wolfgangonline

Hi,

I'm quite new to network administration, but I have a basic understanding of it. I want to realize a VPN Server, to which my friends and I can connect in order to play some old LAN games together.
(e.g. Age of Empires 😉)

So here is my problem. I hope you can help me!:

I've tried to gather some information and it seems that I need a tap connection, because I want broadcasts to be transfered via the VPN.
I don't need to use bridging, because every client connects to the VPN and only clients in the VPN should play together. I've read that it's enough to establish a normal tap conenction.
I have a Windows V-Server on a public IP, so it isn't in my private LAN.

I was able to establish a connection via the VPN and the TAP Adapter. Clients can ping eachother, so that's fine too.

My problem is, that none of the clients has a default gateway. That's why I cannot set the network in windows as a private home network (it's a Public network by default).
And that's why we can't use Windows network features like File Sharing. Moreover, some games seem to require a private home network in order to work via LAN.

It would also be nice, if users could access the internet via the VPN connection and use the IP of the server. With a tun connection I was able to realize that via "redirect-gateway def1" but in my tap connection it doesn't work.

That was the description of my problem :] Here are my config files and my setup:

Setup:

VServer:  Runs OpenVPN Server....  Public-IP: 80.xxx.xxx.xxx   ,   OpenVPN IP: 10.8.1.1      Mask 255.255.255.0

Multiple clients, all connected to the VPN  :     OpenVPN IP:  10.8.1.10....... 10.8.1.100

The OpenVPN network should be used for LAN Gaming. 

(I've read that this setup is called Multi-Singlepoint setup)

Server Config:

proto udp
dev tap
port 1195
dev-node "Ethernet 3"

ca "ca.crt"
cert "server.crt"
key "server.key"
dh "dh1024.pem"

ifconfig 10.8.1.1 255.255.255.0 80.xxx.xxx.xxx
ifconfig-pool-persist ipp2.txt
server-bridge 10.8.1.0 255.255.255.0 10.8.1.10 10.8.1.100
client-to-client

keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Client config:

client

dev tap
proto udp

remote 80.xxx.xxx.xxx 1195

resolv-retry infinite

nobind

persist-key
persist-tun

ca "ca.crt"
cert "user.crt"
key "user.key"

remote-cert-tls server

comp-lzo

verb 3

route-metric 1

I've also started the Windows RAS service and I have set up NAT between the network adapter with the public IP and the OpenVPN adapter.

I'm quite sure that the routing is my problem, but as I said I haven't done a lot of network administration and could use some help.

Oh..and another short question: Is it a good idea to set the metric to 1? As far as I can understand it's some kind of "priority" which network conenction should be used, so I thought setting it to 1 will force the game to use this network connection if it's looking for games.

Thank you in advance!
Have a nice day,

Wolfgang

Traffic

wolfgangonline wroteifconfig 10.8.1.1 255.255.255.0 80.xxx.xxx.xxx

Remove this line completely ..

Also,

wolfgangonline wroteI don't need to use bridging

however,

wolfgangonline wroteserver-bridge 10.8.1.0 255.255.255.0 10.8.1.10 10.8.1.100

how have you configured your server network (ipconfig /all) ?

wolfgangonline wroteMy problem is, that none of the clients has a default gateway

actually they all have a default gateway and windows does not allow you to mess about with it (thanks microsoft) however, you can manually configure windows firewall to allow all vpn packets to pass over the vpn ..