TAP/TUN - bridges/routed question

MarcM3

Hello,
I'am using OpenVPN already on a couple of Synology NAS, and they are working very nice.

On the NAS OpenVPN is configured that when I am connected to there network, I can accces the PC's on the lan with the local IP-adress, and connect to the network-shares vie the local IP-adresses
The IP-range on my LAN is a different one the LAN's of my clients.

Now I have a client that doesn't have a synology NAS, and I want to install OpenVPN on a Windows PC..
If I read the HOWTO-pages, I understand that then I have to use bridged-mode, so I have to use TAP

But if see in my ovpn-file that I use for my cliets with a NAS, I have

dev tun
tls-client
remote xxx.xxx.xxx.xxx 443
redirect-gateway
dhcp-option DNS 192.168.1.1
pull
proto tcp-client
script-security 2
ns-cert-type server
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass

So, the NAS-is not configured as bridged, because I use tun.
The proble is tha I can't see the configuration on the NAS how it is done, because on the NAS they use an APP to configure openvpn.

How can I configure a windows-client so that I use te local IP-adres to access the PC on the lan?

Thank you,

Marc

TinCanTech

You do not need to use --dev tap .. Follow the HOWTO and setup your new Windows PC as server and then connect to shares as you do so now, with the local IP-adress.

MarcM3

Hello,

I have tried it, but I can only make a connection to the PC with the OpenVPN-server installed, and only with the 10.8.0.1 IP.

This is the client config:

tls-client
dev tun
proto tcp-client
remote xxx.xxx.xxx.xxx 1194
topology subnet
pull
resolv-retry infinite
persist-key
persist-tun
ca ca.crt
cert Marc-HNZ.crt
key Marc-HNZ.key
remote-cert-tls server
cipher AES-256-CBC
verb 3

and this the server config:

port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.1 255.255.255.0"
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3

Did I forget something?

MarcM3

Hello,

I have tried it, but I can only make a connection to the PC with the OpenVPN-server installed, and only with the 10.8.0.1 IP.

This is the client config:

tls-client
dev tun
proto tcp-client
remote xxx.xxx.xxx.xxx 1194
topology subnet
pull
resolv-retry infinite
persist-key
persist-tun
ca ca.crt
cert Marc-HNZ.crt
key Marc-HNZ.key
remote-cert-tls server
cipher AES-256-CBC
verb 3

and this the server config:

port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.1 255.255.255.0"
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3

Did I forget something?

TinCanTech

MarcM3 wrote I can only make a connection to the PC with the OpenVPN-server installed, and only with the 10.8.0.1 IP

Did you enable IP Forwarding ?

This may help:

MarcM3

I have enable IP-forwarding on the server.
Now I can already ping the server via a his local IP.
The only problem I still have is accessing the other PC's on the network.