Hi,
I have an issue with a simple OpenVPN configuration (TUN, topology subnet, server <-> client).
Network for the server has 192.168.3.0/24 mask; server IP is 192.168.3.110, it runs on Windows Server 2016. IP Forwarding is enabled according to
this manual.
Network for the client has 192.168.5.0/24 mask; client IP is 192.167.5.101, it runs on Windows 10.
The connection is successful, and I can ping the client from the server (ping 192.168.5.101) and backward (ping 192.168.3.110 from the client).
But all other resources are unavailable, for example, I cannot ping 192.168.3.1 from the client.
port 1194
proto udp4
dev tun
topology subnet
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
client-config-dir ccd
route 192.168.5.0 255.255.255.0
push "route 192.168.3.0 255.255.255.0"
iroute 192.168.5.0 255.255.255.0
client
dev tun
proto udp4
remote myvpnserver 1194
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
remote-cert-tls server
cipher AES-256-CBC
ca ca.crt
cert client.crt
key client.key
Windows IP Configuration
Host Name . . . . . . . . . . . . : WIN-SERVER
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Ethernet:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : 10-BF-48-82-D8-AC
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Local Area Connection* 11:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address. . . . . . . . . : C6-E9-84-DD-28-0F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Ethernet adapter Ethernet 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-6C-95-4B-1C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3c3a:e842:12d0:7979%10(Preferred)
IPv4 Address. . . . . . . . . . . : 10.8.0.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Lease Obtained. . . . . . . . . . : Sunday, October 21, 2018 14:36:04
Lease Expires . . . . . . . . . . : Monday, October 21, 2019 14:36:04
Default Gateway . . . . . . . . . :
DHCP Server . . . . . . . . . . . : 10.8.0.2
DHCPv6 IAID . . . . . . . . . . . : 587267948
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-FA-E5-6A-10-BF-48-82-D8-AC
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Wireless LAN adapter Wi-Fi:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TP-LINK Wireless USB Adapter
Physical Address. . . . . . . . . : C4-E9-84-DD-28-0F
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::e56f:5609:fc13:464e%17(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.3.110(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.3.1
DHCPv6 IAID . . . . . . . . . . . : 281340292
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-FA-E5-6A-10-BF-48-82-D8-AC
DNS Servers . . . . . . . . . . . : 192.168.3.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{6C954B1C-8207-4D6C-8D21-A8176054379B}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{DA0CA1EA-919F-4C67-AD96-465A030A731D}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
===========================================================================
Interface List
3...10 bf 48 82 d8 ac ......Realtek PCIe GBE Family Controller
4...c6 e9 84 dd 28 0f ......Microsoft Wi-Fi Direct Virtual Adapter
10...00 ff 6c 95 4b 1c ......TAP-Windows Adapter V9
17...c4 e9 84 dd 28 0f ......TP-LINK Wireless USB Adapter
1...........................Software Loopback Interface 1
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
20...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.3.1 192.168.3.110 311
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 35
10.8.0.0 255.255.255.252 On-link 10.8.0.1 291
10.8.0.1 255.255.255.255 On-link 10.8.0.1 291
10.8.0.3 255.255.255.255 On-link 10.8.0.1 291
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
192.168.5.0 255.255.255.0 10.8.0.2 10.8.0.1 35
192.168.3.0 255.255.255.0 On-link 192.168.3.110 311
192.168.3.110 255.255.255.255 On-link 192.168.3.110 311
192.168.3.255 255.255.255.255 On-link 192.168.3.110 311
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 10.8.0.1 291
224.0.0.0 240.0.0.0 On-link 192.168.3.110 311
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 10.8.0.1 291
255.255.255.255 255.255.255.255 On-link 192.168.3.110 311
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 192.168.3.1 Default
===========================================================================
10.8.0.6 is IP address of the router inside the VPN network.
What am I doing wrong?
Any advice would be much appreciated.