Set Windows 10 TAP adaptor to private network

nickh

Hi,

I've just deployed OpenVPN on a Win10 box to my aged mother who previously had an XP box. In Win10 the box does not want to respond to pings through the VPN or even on the LAN. I can fix the LAN by allowing the relevant firewall rule for private networks. Unfortunately the Windows TAP adaptor is defined as an Unknown network and I can't find out how to set it to a Private network. For the moment I've set a firewall rule to allow everything from the OpenVPN subnet, but I'd rather disable the rule and just classify the OpenVPN subnet as private.

Is this possible, and, if so, how?

TIA,

Nick

Traffic

nickh wroteFor the moment I've set a firewall rule to allow everything from the OpenVPN subnet

This is exactly what I do ..

nickh wrotebut I'd rather disable the rule and just classify the OpenVPN subnet as private

The problem is Windows .. It only allows you to classify a network as private if it has an associated default gateway (i think .. not 100% sure what windows is upto) and you cannot have two default gateways .. well you can but then things go very peculiar.

nickh

Pity. It would make configuration a lot more foolproof, and safer in the case that the roadwarrior happens to connect to a subnet which is the same as your server's LAN subnet. Then no traffic will go down the tunnel and the machine will be totally open to anyone on that subnet.

Traffic

Considering the range of RFC1918 available subnets, a properly configured system is extremely unlikely to have such a conflict.

nickh

Agreed. That is why I've picked on something in the 172.16/12 range 😉 It is just that if Micro$oft allowed it, it could be made even safer.

DavidJacobs

Hi,

Having the same issue I was able to make the TAP adapter private by pushing a default gateway to it.
Now being able to ping from client to server and vice verse.

push "route-metric 512"
push "route 0.0.0.0 0.0.0.0"

ubermudr

into server config file or client config file?

nikolaiortiz

Hi,
I can made ping from server to client and vice versa but I can't see the shared Files ..
I disable the firewall for the TAP adapter in the client and the server.

Thanks ...

nickh

Please make your own thread and give more information about your set up like operating systems and so on. Also how you are trying to "see" the files?

TinCanTech

@nickh .. thanks for your help 8-)

DavidJacobs wrote Having the same issue I was able to make the TAP adapter private by pushing a default gateway to it.
Now being able to ping from client to server and vice verse.

push "route-metric 512"
push "route 0.0.0.0 0.0.0.0"

ubermudr wrote into server config file or client config file?

You push from the server ..

This thread should be closed.