Routing all traffic through OpenVPN server

diegobr

Hi!

My server's OS is Windows 2008 Server and my client's OS is Windows 7.

I tryied to config the server with the option: push "redirect-gateway def1 bypass-dhcp"

But after this the clien't can't access any webpage...

I just want the client to traffic as like he is the server.

Could anyone help me to config it, please?

Thank you!

Traffic

Please see the Forum rules (top of page)

diegobr

Traffic wrotePlease see the Forum rules (top of page)

want my configs?

My goal is the clients all traffic through server, as they are the same location from server.

Server's OS: Windows 2008 Server
Client's OS: Windows 7

Client.ovpn:

client

dev tun

proto udp

remote MY-SERVER-EXTERNAL-IP-HERE 1194

resolv-retry infinite

nobind

persist-key
persist-tun

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client.crt"
key "C:\\Program Files\\OpenVPN\\config\\client.key"

ns-cert-type server

comp-lzo

verb 3

explicit-exit-notify 2
ping 10
ping-restart 60

route-method exe
route-delay 2

Server.ovpn:

port 1194

proto udp

dev tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key"

dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "redirect-gateway def1"

keepalive 10 120

comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 3

I can connect to VPN but the clients don't open any website or gets any web traffic.

Thank you!

Traffic

Please see the HOWTO:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

diegobr

Traffic wrotePlease see the HOWTO:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

I did what the site says but it don't works.

server.opvn:

port 1194

proto udp

dev tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key"

dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "redirect-gateway def1"

push "dhcp-option DNS 10.8.0.1"

keepalive 10 120

comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 3

client.opvn:

client

dev tun

proto udp

remote MY-SERVER-EXTERNAL-IP 1194

resolv-retry infinite

nobind

persist-key
persist-tun

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client.crt"
key "C:\\Program Files\\OpenVPN\\config\\client.key"

ns-cert-type server

comp-lzo

verb 3

explicit-exit-notify 2
ping 10
ping-restart 60

route-method exe
route-delay 2

My server got ip: 10.8.0.1
My client got ip: 10.8.0.6

I still cannot access internet with client.

What i did wrong?

Could you help me, please?

Thank you!

Traffic

diegobr wroteI did what the site says but it don't work

diegobr wroteServer's OS: Windows 2008 Server
Client's OS: Windows 7

So you cannot do iptables NAT, You could try NATHack on the server.

diegobr

Traffic wrote
diegobr wroteI did what the site says but it don't work
diegobr wroteServer's OS: Windows 2008 Server
Client's OS: Windows 7
So you cannot do iptables NAT, You could try NATHack on the server.

Sorry, i can't understand yet. Could you help me, please?

This guide works on Windows Server 2008? My server has windows server, not xp.

In those steps :

As I wanted to connect the VPN clients to the corporate network I had to add both the internet NIC and the corporate NIC as FULL:

1. Modify Registry Entry to allow IP forwarding:
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
 IPEnableRouter=1

2. net stop remoteaccess Stop the RAS Service
3. netsh routing ip nat install
4. netsh routing ip nat add interface "eth0 internet" full
5. netsh routing ip nat add interface "eth1 corporate" full
6. netsh routing ip nat add interface "vpn0 openvpn" private
7. netsh routing ip nat add interface Internal private
8. net start remoteaccess

My server is dedicated and im connect to it from Remote Desktop Connection.
If i do the 2nd command and stop remoteaccess, won't i be disconect from the remote server?
What could i do?

Here are my server's network:

What commands have I use on steps 4 to 7?

Thank you very much for the help.

Pippin

I think this will help you:
http://www.windowsnetworking.com/articles-tutorials/windows-server-2008/Using-Windows-Server-NAT-Router.html

Search keywords: windows 2008 server enable router