Problem with windows 10

DazLolipopz

I am tryion to connect to my openvpn server running on pfsense, I am able to connect and everything works on my android phone. I am able to using the same config on my windows 10 laptop, build 1607 (14393.1480). I get an ip assigned but nothing else works, i'm not even able to ping the router(server).

Here is my config: persist-tun
persist-key
cipher AES-256-CBC
auth SHA256
tls-client
client
remote *MY IP* 1194 udp
setenv opt block-outside-dns
lport 0
verify-x509-name "*A DOMAIN POINTING TO MY IP*" name
auth-user-pass
remote-cert-tls server
dev tun

<ca>
-----BEGIN CERTIFICATE-----
*I REMOVED THE KEY*
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
*I REMOED THE KEY*
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
*I REMOVED THE KEY*
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
*I REMOVED THE KEY*
-----END OpenVPN Static key V1-----
</tls-auth>

TinCanTech

DazLolipopz wrote I get an ip assigned but nothing else works, i'm not even able to ping the router(server).

Check all firewalls.

DazLolipopz

i have tried to disable the windows firewall and that didn't help

TinCanTech

I suggest you check (and post) your logs.

Please see:
HOWTO: Request Help ! {2}

DazLolipopz

This is the client log
I replaced my ip with IP and my domain with DOMAIN

Thu Jul 20 14:53:25 2017 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 20 2017
Thu Jul 20 14:53:25 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Jul 20 14:53:25 2017 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Thu Jul 20 14:53:27 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]IP:1194
Thu Jul 20 14:53:27 2017 UDP link local (bound): [AF_INET][undef]:0
Thu Jul 20 14:53:27 2017 UDP link remote: [AF_INET]IP:1194
Thu Jul 20 14:53:27 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jul 20 14:53:28 2017 [DOMAIN] Peer Connection Initiated with [AF_INET]IP:1194
Thu Jul 20 14:53:29 2017 open_tun
Thu Jul 20 14:53:29 2017 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{E2C4DFA2-36FC-48E2-81C3-A682F76B2B3A}.tap
Thu Jul 20 14:53:29 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.0.0/192.168.0.4/255.255.255.0 [SUCCEEDED]
Thu Jul 20 14:53:29 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.0.4/255.255.255.0 on interface {E2C4DFA2-36FC-48E2-81C3-A682F76B2B3A} [DHCP-serv: 192.168.0.254, lease-time: 31536000]
Thu Jul 20 14:53:29 2017 Successful ARP Flush on interface [21] {E2C4DFA2-36FC-48E2-81C3-A682F76B2B3A}
Thu Jul 20 14:53:29 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Jul 20 14:53:29 2017 Blocking outside dns using service succeeded.
Thu Jul 20 14:53:34 2017 Initialization Sequence Completed
Thu Jul 20 14:53:34 2017 Register_dns request sent to the service
Thu Jul 20 14:54:03 2017 Unblocking outside dns using service succeeded.
Thu Jul 20 14:54:03 2017 SIGTERM[hard,] received, process exiting

TinCanTech

DazLolipopz wroteNotified TAP-Windows driver to set a DHCP IP/netmask of 192.168.0.4/255.255.255.0 on interface {E2C4DFA2-36FC-48E2-81C3-A682F76B2B3A} [DHCP-serv: 192.168.0.254, lease-time: 31536000]

That is almost guaranteed to be a misconfiguration.

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!:

You are advised to change your server LAN to a more unique RFC1918 compliant subnet.
For example: 192.168.143.0/24

Or, in your case, never use --server 192.168.0.0 255.255.255.0

I suggest you read the HOWTO: For OpenVPN Community Edition and also figure out how to get your openvpn server config and log from your pfSense box.

DazLolipopz

Thanks a lot, that fixed it. I didn't realize that could cause problems since it works on my phone connected to the same network.