Hello, I have a problem. I recently created a VPN server and realized 1 client
The problem is that this customer does not access the local network in WAN (Access outside) I have access to the internet but I do not have access to the local network. I can ping the different members of the network such as my box my nas and the various users of the local network. But I can not access anything else. Just the power of Ping.
My firebox and the firewall of my computer is at least But still nothing.
Here are the configuration of my client.ovpn (Windows 8)
##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server. #
# #
# This configuration can be used by multiple #
# clients, however each client should have #
# its own cert and key files. #
# #
# On Windows, you might want to rename this #
# file so it has a .ovpn extension #
##############################################
# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client
# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap
# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
;proto tcp
proto udp
# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote XX.XX.XXX.XX 1194
;remote my-server-2 1194
# Choose a random host from the remote
# list for load-balancing. Otherwise
# try hosts in the order specified.
;remote-random
# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite
# Most clients don't need to bind to
# a specific local port number.
nobind
# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nogroup
# Try to preserve some state across restarts.
persist-key
persist-tun
# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings
# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
ca ca.crt
cert AsusPC.crt
key AsusPC.key
# Verify server certificate by checking that the
# certicate has the correct key usage set.
# This is an important precaution to protect against
# a potential attack discussed here:
# http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the keyUsage set to
# digitalSignature, keyEncipherment
# and the extendedKeyUsage to
# serverAuth
# EasyRSA can do this for you.
remote-cert-tls server
# If a tls-auth key is used on the server
# then every client must also have the key.
tls-auth ta.key 1
# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
# Note that 2.4 client/server will automatically
# negotiate AES-256-GCM in TLS mode.
# See also the ncp-cipher option in the manpage
cipher AES-256-CBC
# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
#comp-lzo
# Set log file verbosity.
verb 3
# Silence repeating messages
;mute 20
Here are the logs of my client.ovpn
Tue Jun 26 17:22:14 2018 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Tue Jun 26 17:22:14 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Jun 26 17:22:14 2018 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10
Enter Management Password:
Tue Jun 26 17:22:14 2018 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Jun 26 17:22:14 2018 Need hold release from management interface, waiting...
Tue Jun 26 17:22:14 2018 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Jun 26 17:22:15 2018 MANAGEMENT: CMD 'state on'
Tue Jun 26 17:22:15 2018 MANAGEMENT: CMD 'log all on'
Tue Jun 26 17:22:15 2018 MANAGEMENT: CMD 'echo all on'
Tue Jun 26 17:22:15 2018 MANAGEMENT: CMD 'bytecount 5'
Tue Jun 26 17:22:15 2018 MANAGEMENT: CMD 'hold off'
Tue Jun 26 17:22:15 2018 MANAGEMENT: CMD 'hold release'
Tue Jun 26 17:22:15 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 26 17:22:15 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 26 17:22:15 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]80.13.121.68:1194
Tue Jun 26 17:22:15 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Jun 26 17:22:15 2018 UDP link local: (not bound)
Tue Jun 26 17:22:15 2018 UDP link remote: [AF_INET]80.13.121.68:1194
Tue Jun 26 17:22:15 2018 MANAGEMENT: >STATE:1530026535,WAIT,,,,,,
Tue Jun 26 17:22:15 2018 MANAGEMENT: >STATE:1530026535,AUTH,,,,,,
Tue Jun 26 17:22:15 2018 TLS: Initial packet from [AF_INET]80.13.121.68:1194, sid=05fb9621 afce993b
Tue Jun 26 17:22:16 2018 VERIFY OK: depth=1, C=FR, ST=Aquitaine, L=Saint-Léon-Sur-L'isle, O=Arobase24, OU=Arobase24, CN=Arobase24, name=server, emailAddress=lfptmathieufr@outlook.fr
Tue Jun 26 17:22:16 2018 VERIFY KU OK
Tue Jun 26 17:22:16 2018 Validating certificate extended key usage
Tue Jun 26 17:22:16 2018 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Jun 26 17:22:16 2018 VERIFY EKU OK
Tue Jun 26 17:22:16 2018 VERIFY OK: depth=0, C=FR, ST=Aquitaine, L=Saint-Léon-Sur-L'isle, O=Arobase24, OU=Arobase24, CN=server, name=server, emailAddress=lfptmathieufr@outlook.fr
Tue Jun 26 17:22:17 2018 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jun 26 17:22:17 2018 [server] Peer Connection Initiated with [AF_INET]80.13.121.68:1194
Tue Jun 26 17:22:18 2018 MANAGEMENT: >STATE:1530026538,GET_CONFIG,,,,,,
Tue Jun 26 17:22:18 2018 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Jun 26 17:22:18 2018 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM'
Tue Jun 26 17:22:18 2018 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jun 26 17:22:18 2018 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jun 26 17:22:18 2018 OPTIONS IMPORT: route options modified
Tue Jun 26 17:22:18 2018 OPTIONS IMPORT: peer-id set
Tue Jun 26 17:22:18 2018 OPTIONS IMPORT: adjusting link_mtu to 1624
Tue Jun 26 17:22:18 2018 OPTIONS IMPORT: data channel crypto options modified
Tue Jun 26 17:22:18 2018 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Jun 26 17:22:18 2018 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jun 26 17:22:18 2018 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jun 26 17:22:18 2018 interactive service msg_channel=684
Tue Jun 26 17:22:18 2018 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=3 HWADDR=24:0a:64:7b:3f:b2
Tue Jun 26 17:22:18 2018 open_tun
Tue Jun 26 17:22:18 2018 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{86D07F52-1C6C-4BCC-B851-8D8DE96662B5}.tap
Tue Jun 26 17:22:18 2018 TAP-Windows Driver Version 9.21
Tue Jun 26 17:22:18 2018 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {86D07F52-1C6C-4BCC-B851-8D8DE96662B5} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue Jun 26 17:22:18 2018 Successful ARP Flush on interface [18] {86D07F52-1C6C-4BCC-B851-8D8DE96662B5}
Tue Jun 26 17:22:18 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Jun 26 17:22:18 2018 MANAGEMENT: >STATE:1530026538,ASSIGN_IP,,10.8.0.6,,,,
Tue Jun 26 17:22:23 2018 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Tue Jun 26 17:22:23 2018 MANAGEMENT: >STATE:1530026543,ADD_ROUTES,,,,,,
Tue Jun 26 17:22:23 2018 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Tue Jun 26 17:22:23 2018 Route addition via service succeeded
Tue Jun 26 17:22:23 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Jun 26 17:22:23 2018 Initialization Sequence Completed
Tue Jun 26 17:22:23 2018 MANAGEMENT: >STATE:1530026543,CONNECTED,SUCCESS,10.8.0.6,80.13.121.68,1194,,
Thank you for your future response cordially !