[deleted]
Hi there,
I have a new deployment of OpenVPN AS behind a NAT router. I can connect clients to it fine and once connected ping by IP the servers on the company LAN (192.168.1.0)
I have configured the AS to use the two Server 2012 DNS servers on the LAN, 192.168.1.8, 192.168.1.9. However connected clients although they can ping these servers they cannot then resolve hostnames on the company LAN for fils sharing etc.
AS config as follows. What am i missing here to make the client use the DNS Servers listed?
Many thanks.
________________________
login as: root
root@192.168.1.230's password:
Welcome to OpenVPN Access Server Appliance 2.0.12
Last login: Fri Aug 28 13:15:02 2015 from 192.168.1.21
root@openvpnas2:~# /usr/local/openvpn_as/scripts/confdba -s
{
"Default": {
"admin_ui.https.ip_address": "eth0",
"admin_ui.https.port": "943",
"aui.eula_version": "2",
"auth.ldap.0.bind_dn": "CN=administrator,CN=Users,DC=domain,DC=domain1,DC=ie"
"auth.ldap.0.bind_pw": "********",
"auth.ldap.0.name": "My LDAP servers",
"auth.ldap.0.server.0.host": "192.168.1.8",
"auth.ldap.0.server.1.host": "192.168.1.9",
"auth.ldap.0.ssl_verify": "never",
"auth.ldap.0.timeout": "4",
"auth.ldap.0.uname_attr": "sAMAccountName",
"auth.ldap.0.use_ssl": "never",
"auth.ldap.0.users_base_dn": "OU=Users OU, DC=domain, DC=domain1, DC=ie",
"auth.module.type": "ldap",
"auth.pam.0.service": "openvpnas",
"auth.radius.0.acct_enable": "false",
"auth.radius.0.name": "My Radius servers",
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
"host.name": "remoteaccess",
"sa.initial_run_groups.0": "web_group",
"sa.initial_run_groups.1": "openvpn_group",
"vpn.client.basic": "false",
"vpn.client.routing.inter_client": "false",
"vpn.client.routing.reroute_dns": "custom",
"vpn.client.routing.reroute_gw": "false",
"vpn.daemon.0.client.netmask_bits": "20",
"vpn.daemon.0.client.network": "172.27.224.0",
"vpn.daemon.0.listen.ip_address": "eth0",
"vpn.daemon.0.listen.port": "443",
"vpn.daemon.0.listen.protocol": "tcp",
"vpn.daemon.0.server.ip_address": "eth0",
"vpn.general.osi_layer": "3",
"vpn.server.daemon.enable": "true",
"vpn.server.daemon.tcp.n_daemons": "2",
"vpn.server.daemon.tcp.port": "444",
"vpn.server.daemon.udp.n_daemons": "2",
"vpn.server.daemon.udp.port": "1194",
"vpn.server.dhcp_option.dns.0": "192.168.1.8",
"vpn.server.dhcp_option.dns.1": "192.168.1.9",
"vpn.server.group_pool.0": "172.27.240.0/20",
"vpn.server.nat.masquerade": "true",
"vpn.server.port_share.enable": "true",
"vpn.server.port_share.ip_address": "1.2.3.4",
"vpn.server.port_share.port": "1234",
"vpn.server.port_share.service": "admin+client",
"vpn.server.routing.gateway_access": "true",
"vpn.server.routing.private_access": "nat",
"vpn.server.routing.private_network.0": "192.168.1.0/24",
"vpn.tls_refresh.do_reauth": "true",
"vpn.tls_refresh.interval": "360"
},
"_INTERNAL": {
"run_api.active_profile": "Default",
"webui.edit_profile": "Default",
"webui.welcome_shown": "true"
}
}
root@openvpnas2:~# rebootroot@openvpnas2:~# /usr/local/openvpn_as/scripts/confdba -s
-bash: rebootroot@openvpnas2:~#: command not found
root@openvpnas2:~# {
> "Default": {
> "admin_ui.https.ip_address": "eth0",
> "admin_ui.https.port": "943",
> "aui.eula_version": "2",
> "auth.ldap.0.bind_dn": "CN=administrator,CN=Users,DC=domain,DC=domain1 ,DC=ie",
> "auth.ldap.0.bind_pw": "********",
> "auth.ldap.0.name": "My LDAP servers",
> "auth.ldap.0.server.0.host": "192.168.1.8",
> "auth.ldap.0.server.1.host": "192.168.1.9",
> "auth.ldap.0.ssl_verify": "never",
> "auth.ldap.0.timeout": "4",
> "auth.ldap.0.uname_attr": "sAMAccountName",
> "auth.ldap.0.use_ssl": "never",
> "auth.ldap.0.users_base_dn": "OU=SF Users OU, DC=domain, DC=domain1, D C=ie",
> "auth.module.type": "ldap",
> "auth.pam.0.service": "openvpnas",
> "auth.radius.0.acct_enable": "false",
> "auth.radius.0.name": "My Radius servers",
> "cs.cws_proto_v2": "true",
> "cs.https.ip_address": "eth0",
> "cs.https.port": "943",
> "cs.prof_sign_web": "true",
> "host.name": "88.151.82.3",
> "sa.initial_run_groups.0": "web_group",
> "sa.initial_run_groups.1": "openvpn_group",
> "vpn.client.basic": "false",
> "vpn.client.routing.inter_client": "false",
> "vpn.client.routing.reroute_dns": "custom",
> "vpn.client.routing.reroute_gw": "false",
> "vpn.daemon.0.client.netmask_bits": "20",
> "vpn.daemon.0.client.network": "172.27.224.0",
> "vpn.daemon.0.listen.ip_address": "eth0",
> "vpn.daemon.0.listen.port": "443",
> "vpn.daemon.0.listen.protocol": "tcp",
> "vpn.daemon.0.server.ip_address": "eth0",
> "vpn.general.osi_layer": "3",
> "vpn.server.daemon.enable": "true",
> "vpn.server.daemon.tcp.n_daemons": "2",
> "vpn.server.daemon.tcp.port": "444",
> "vpn.server.daemon.udp.n_daemons": "2",
> "vpn.server.daemon.udp.port": "1194",
> "vpn.server.dhcp_option.dns.0": "192.168.1.8",
> "vpn.server.dhcp_option.dns.1": "192.168.1.9",
> "vpn.server.group_pool.0": "172.27.240.0/20",
> "vpn.server.nat.masquerade": "true",
> "vpn.server.port_share.enable": "true",
> "vpn.server.port_share.ip_address": "1.2.3.4",
> "vpn.server.port_share.port": "1234",
> "vpn.server.port_share.service": "admin+client",
> "vpn.server.routing.gateway_access": "true",
> "vpn.server.routing.private_access": "nat",
> "vpn.server.routing.private_network.0": "192.168.1.0/24",
> "vpn.tls_refresh.do_reauth": "true",
> "vpn.tls_refresh.interval": "360"
> },
> "_INTERNAL": {
> "run_api.active_profile": "Default",
> "webui.edit_profile": "Default",
> "webui.welcome_shown": "true"
> }
-bash: Default:: command not found
-bash: admin_ui.https.ip_address:: command not found
-bash: admin_ui.https.port:: command not found
-bash: aui.eula_version:: command not found
-bash: auth.ldap.0.bind_dn:: command not found
-bash: auth.ldap.0.bind_pw:: command not found
-bash: auth.ldap.0.name:: command not found
-bash: auth.ldap.0.server.0.host:: command not found
-bash: auth.ldap.0.server.1.host:: command not found
-bash: auth.ldap.0.ssl_verify:: command not found
-bash: auth.ldap.0.timeout:: command not found
-bash: auth.ldap.0.uname_attr:: command not found
-bash: auth.ldap.0.use_ssl:: command not found
-bash: auth.ldap.0.users_base_dn:: command not found
-bash: auth.module.type:: command not found
-bash: auth.pam.0.service:: command not found
-bash: auth.radius.0.acct_enable:: command not found
-bash: auth.radius.0.name:: command not found
-bash: cs.cws_proto_v2:: command not found
-bash: cs.https.ip_address:: command not found
-bash: cs.https.port:: command not found
-bash: cs.prof_sign_web:: command not found
-bash: host.name:: command not found
-bash: sa.initial_run_groups.0:: command not found
-bash: sa.initial_run_groups.1:: command not found
-bash: vpn.client.basic:: command not found
-bash: vpn.client.routing.inter_client:: command not found
-bash: vpn.client.routing.reroute_dns:: command not found
-bash: vpn.client.routing.reroute_gw:: command not found
-bash: vpn.daemon.0.client.netmask_bits:: command not found
-bash: vpn.daemon.0.client.network:: command not found
-bash: vpn.daemon.0.listen.ip_address:: command not found
-bash: vpn.daemon.0.listen.port:: command not found
-bash: vpn.daemon.0.listen.protocol:: command not found
-bash: vpn.daemon.0.server.ip_address:: command not found
-bash: vpn.general.osi_layer:: command not found
-bash: vpn.server.daemon.enable:: command not found
-bash: vpn.server.daemon.tcp.n_daemons:: command not found
-bash: vpn.server.daemon.tcp.port:: command not found
-bash: vpn.server.daemon.udp.n_daemons:: command not found
-bash: vpn.server.daemon.udp.port:: command not found
-bash: vpn.server.dhcp_option.dns.0:: command not found
-bash: vpn.server.dhcp_option.dns.1:: command not found
-bash: vpn.server.group_pool.0:: command not found
-bash: vpn.server.nat.masquerade:: command not found
-bash: vpn.server.port_share.enable:: command not found
-bash: vpn.server.port_share.ip_address:: command not found
-bash: vpn.server.port_share.port:: command not found
-bash: vpn.server.port_share.service:: command not found
-bash: vpn.server.routing.gateway_access:: command not found
-bash: vpn.server.routing.private_access:: command not found
-bash: vpn.server.routing.private_network.0:: command not found
-bash: vpn.tls_refresh.do_reauth:: command not found
-bash: vpn.tls_refresh.interval:: command not found
-bash: },: command not found
-bash: _INTERNAL:: command not found
-bash: run_api.active_profile:: command not found
-bash: webui.edit_profile:: command not found
-bash: webui.welcome_shown:: command not found
root@openvpnas2:~# }
-bash: syntax error near unexpected token `}'
root@openvpnas2:~#
