open vpn server on windows 7 <--> android conecting via internet

jvds

Hi guys, please help me,

I need help configuring Open Vpn server on windows 7, i need it to pass internet to my android device connected through the mobile connection, also would like the android to be able to see the other devices on the same network

i tried this tutorial (https://community.openvpn.net/openvpn/wiki/NatHack) but it is a complete mess on windows 7 because the netsh command does not work on win 7, i tried with a windows XP Spanish and even worse, i don't know the service names in Spanish and don't want to use windows XP anyways

i got the android(client conected via internet, with phone mobile data connection) and another windows(client in the same lan network than server) to connect to the windows 7(server) successfully, they can ping each other and the server, but there is no internet

here is my server configuration (windows 7) port 80

proto tcp
;dev tap
dev tun

dev-node tap-bridge

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
topology subnet

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "route 192.168.1.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
;push "redirect-gateway def1 bypass-dhcp"
push "redirect-gateway def1"

client-to-client

duplicate-cn

keepalive 10 120comp-lzo
persist-key
persist-tun

status openvpn-status.log

verb 3 and client configuration (android and windows clients) client

;dev tap
dev tun

;dev-node MyTap

proto tcp
;proto udp

remote ***.***.***.171 80
;remote my-server-2 1194

;remote-random

resolv-retry infinite

nobind

persist-key
persist-tun

ca ca.crt
cert celtest2.crt
key celtest2.key

remote-cert-tls server

comp-lzo

verb 3

;mute 20 pd: main goal was to make the open vpn server with a bridge between 'tap adapter' and 'lan adapter' but turns out that android wont support (dev tap), but if there is a way of making my android believe its in the same network via bridge or similar with the same ips, than please give me directions on what to do for that too, for now internet is the priority to fix, second is routing to see other network devices, and lastly if possible bridge mode to have the same network ip adress range (android)

TinCanTech

This post may help:
https://forums.openvpn.net/viewtopic.php?f=7&t=20765

You can not use any form of bridge with --dev tun to support android ..

jvds

solved with that tutorial, thanks i had to share internet conection on the lan interface conected to the internet router, and tell it to share internet with the tap driver

noticed something weird yesterday, my cellphone currier does not give me internet unless i buy data packets of 15 mb or more, but the vpn on phone connected to my server even without internet service, and i was not on wifi!, i tested today again, and the phones open vpn connects to my server via mobile connection, but i cant ping it or so, does this mean that some how my courier does not do a good job blocking my internet on my device? or is it because i used port 80?
any expert on vpn can tell me if the connection was successful, does it mean in theory at least, that i can bypass my courrier internet blockade?

mmm286

jvds wrote solved with that tutorial, thanks i had to share internet conection on the lan interface conected to the internet router, and tell it to share internet with the tap driver

noticed something weird yesterday, my cellphone currier does not give me internet unless i buy data packets of 15 mb or more, but the vpn on phone connected to my server even without internet service, and i was not on wifi!, i tested today again, and the phones open vpn connects to my server via mobile connection, but i cant ping it or so, does this mean that some how my courier does not do a good job blocking my internet on my device? or is it because i used port 80?
any expert on vpn can tell me if the connection was successful, does it mean in theory at least, that i can bypass my courrier internet blockade?

Hi. I have same problem that you had. Could you check my config please:
Server

 port 1194
proto udp
dev tun
server 10.0.0.0 255.255.255.0   #you may choose any subnet. 10.0.0.x is used for this example.

push "redirect-gateway def1"

push "dhcp-option DNS 8.8.8.8"  
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"  # This file should be kept secret

#verb 9
# Diffie hellman parameters.
# Generate your own with:
#   openssl dhparam -out dh2048.pem 2048
dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem"

Client

 client
dev tun
proto udp
remote PUBLIC_IP 1194   

resolv-retry infinite
nobind
persist-key
persist-tun

ca "/storage/emulated/0/Download/ca.crt"
cert "/storage/emulated/0/Download/client.crt"
key "/storage/emulated/0/Download/client.key"
ns-cert-type server



explicit-exit-notify 2
ping 10
ping-restart 60

route-method exe
route-delay 2

redirect-gateway def1

Thanks

Mohitvermaji51

Right click on an OpenVPN configuration file (. ovpn) and select Start OpenVPN on this configuration file. ...
Run OpenVPN from a command prompt Window with a command such as: openvpn myconfig.ovpn. ...
Run OpenVPN as a service by putting one or more .
mybk-experience.onl mc-d.uno