Hi,
Yes, i know, that i'm new on this forum, but i can't find any solution for my problem in internet, so i decided to register here.
So what's the problem, or problems. Earlier i had a connection with dev = tun, with routing table etc. Everything work correctly, between that, i didn't see any host in network (different subnets), so i decide to make a tap connection. First i make a connection between two routers, on the first one i started a server, and second one works as client. I make bridge between tap and lad adapters and everything work correctly, i see devices from lan on both devices (i can ping them). But problem is when i try connect another client, across the internet (i try only on windows). Windows device "see" server and host on server side, but i can't "see" another client. I tested with trace route (i have subnet /24 and i have added a route to this subnet on routing table), i send a ping to server, and trace route show only one host (that's correctly), but when i want ping a client, behind a tap network, trace go via a default gateway, i don't know why. Of course on windows host, across the internet, i have different network (192.168.y.y) than at server (192.168.x.x). Second problem is that, that on windows TAP adapter i hasn't a IP from range, but from my server LAN side.
# server openvpn config
config openvpn 'OpenVPN'
option enabled '1'
option port '1194'
option proto 'udp'
option dev 'tap'
option mode 'server'
option tls_server '1'
option ca '/etc/openvpn/ca.crt'
option cert '/etc/openvpn/rudnickiego.crt'
option key '/etc/openvpn/rudnickiego.key'
option dh '/etc/openvpn/dh2048.pem'
option server_bridge '192.168.1.1 255.255.255.0 192.168.1.101 192.168.1.120'
list push 'route 192.168.100.1 255.255.255.255 192.168.1.1'
list push 'dhcp-option DNS 192.168.1.1'
list push 'dhcp-option WINS 192.168.1.1'
option client-to-client '1'
option keepalive '10 120'
option max_clients '100'
option status '/etc/openvpn/openvpn-status.log'
option log '/etc/openvpn/openvpn.log'
option log_append '/etc/openvpn/openvpn.log'
option verb '3'
option mute '20'
# trace route to server from windows client across the internet
C:\Users\bartlomiej.figura>tracert 192.168.1.1
Śledzenie trasy do Bonczyk.lan [192.168.1.1]
z maksymalną liczbą 30 przeskoków:
1 23 ms 23 ms 24 ms Bonczyk.lan [192.168.1.1]
Śledzenie zakończone.
# trace route to client from windows client across the internet
C:\Users\bartlomiej.figura>tracert 192.168.1.21
Śledzenie trasy do 192.168.1.21 z maksymalną liczbą 30 przeskoków.
1 1 ms 1 ms <1 ms gateway.tkpsa.prv [192.168.90.1]
2 gateway.tkpsa.prv [192.168.90.1] raporty: Host docelowy jest nieosiągalny.
Śledzenie zakończone.
# routing table on windows client across the internet
Tabela tras IPv4
===========================================================================
Aktywne trasy:
Miejsce docelowe w sieci Maska sieci Brama Interfejs Metryka
0.0.0.0 0.0.0.0 192.168.90.1 192.168.90.65 2
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.4 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.127.249 266
169.254.127.249 255.255.255.255 On-link 169.254.127.249 266
169.254.255.255 255.255.255.255 On-link 169.254.127.249 266
192.168.1.0 255.255.255.0 On-link 192.168.1.4 276
192.168.1.4 255.255.255.255 On-link 192.168.1.4 276
192.168.1.255 255.255.255.255 On-link 192.168.1.4 276
192.168.90.0 255.255.255.0 On-link 192.168.90.65 257
192.168.90.65 255.255.255.255 On-link 192.168.90.65 257
192.168.90.255 255.255.255.255 On-link 192.168.90.65 257
192.168.100.1 255.255.255.255 192.168.1.1 192.168.1.4 20
192.168.137.0 255.255.255.0 On-link 192.168.137.1 286
192.168.137.1 255.255.255.255 On-link 192.168.137.1 286
192.168.137.255 255.255.255.255 On-link 192.168.137.1 286
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.90.65 257
224.0.0.0 240.0.0.0 On-link 169.254.127.249 266
224.0.0.0 240.0.0.0 On-link 192.168.1.4 276
224.0.0.0 240.0.0.0 On-link 192.168.137.1 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.90.65 257
255.255.255.255 255.255.255.255 On-link 169.254.127.249 266
255.255.255.255 255.255.255.255 On-link 192.168.1.4 276
255.255.255.255 255.255.255.255 On-link 192.168.137.1 286
# IP config on windows TAP adapter, across the internet
C:\Users\bartlomiej.figura>ipconfig
Konfiguracja IP systemu Windows
Karta Ethernet OVPN:
Sufiks DNS konkretnego połączenia : lan
Adres IPv6. . . . . . . . . . . . : fdda:42e4:8033::c77
Adres IPv6. . . . . . . . . . . . : fdda:42e4:8033:0:4898:9a3b:a036:3054
Tymczasowy adres IPv6 . . . . . . : fdda:42e4:8033:0:d0ce:fbdc:5d38:1a89
Adres IPv6 połączenia lokalnego . : fe80::4898:9a3b:a036:3054%27
Adres IPv4. . . . . . . . . . . . . : 192.168.1.4
Maska podsieci. . . . . . . . . . : 255.255.255.0
Brama domyślna. . . . . . . . . . : 192.168.1.1
