SMB transfer do not start

nisaloncaje

Hi guys

So I've installed OpenVPN on my "server" machine (Windows 7 PRO x64) (192.168.1.10), and I connect to it with 1 android phone (marshmallow) and one laptop (windows 10 pro)

For both, everything works almost fine. I can connect to internet with the correct IP address, I can ping and access services on multiple ports on my server machine. I can also access the SMB share, browse through all the files available there. BUT I cannot copy them. The copy never starts. First I thought that this was linked to my android phone (I'm fairly new to android) so I tried with the windows 10 laptop. Same thing.
When I am physically inside the local network, not using openvpn, I can do the copy. So this really seems linked to OpenVPN.

The server.openvpn:

port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key" 
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

The client opvn:

client
dev tun
proto udp
remote <myhostnamehere> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\desktop.crt"
key "C:\\Program Files\\OpenVPN\\config\\desktop.key"
remote-cert-tls server
comp-lzo
verb 3

Can you see anything wrong with my configuration ? Do you have any idea about how to solve the issue ?

Thanks a lot for your help 🙂

Traffic

A more appropriate question is what protocols does windows SMB require to function ?
(I do not know the answer to that)

You may also need to check that your (windows) firewall allows all tunnel packets to/from SMB.

nisaloncaje

I had disabled the windows firewall for this test.

So, I investigated a little bit more, changed the local network adress from 192.168.1.x to 192.168.83.x (just in case this could be a conflict of some kind), but nothing changed.
I also changed the VPN network to 192.168.84.x (instead of 10.8.0.x)

I noticed that, in the server logs, I have multiple
android-phone/[deviceIp - not on VPN local network]:49276 MULTI: bad source address from client [192.168.0.233], packet dropped

The weird thing about this is that I'm not sure why this 192.168.0.233 addressappears here. No one is supposed to have this adress since the two subnets are 192.168.83.x and 192.168.84.x

This could be the key to my struggle, but I'm not sure how to solve this.

Traffic

nisaloncaje wroteThe weird thing about this is that I'm not sure why this 192.168.0.233 addressappears

I expect 192.168.0.233 is the LAN side address of the client ..

You can resolve this by implementing this HOWTO (Specifically for the client host IP):
HOWTO: Expanding the scope of the VPN to include additional machines

nisaloncaje

Sadly, my internet gateway does not have the option to " set up a route on the server-side LAN gateway to route the VPN client subnet (10.8.0.0/24) to the OpenVPN server (this is only necessary if the OpenVPN server and the LAN gateway are different machines)."

Any other solution ?

Traffic

nisaloncaje wroteAny other solution ?

Yes ..

nisaloncaje wrotemy internet gateway does not have the option to " set up a route on the server-side LAN gateway

Your gateway does not need the route only the OpenVPN sever does .. read the HOWTO carefully.

nisaloncaje

I'm sorry, but I don't see what I'm missing there :/

Traffic

Please post your current server config ..

Ziyon

Hello,
Turning off QoS on both machines boosted the speed of a single transfer to 9MB/s. Upgrading the XP machine to Win7 resulted in a 11MB/s transfer speed regardless of QoS setting. Ergo: SMBv2 on both clients fixed the problem.
Thanks.

Traffic

@Ziyon .. speed is not the issue .. connectivity is :roll: