Using new install of OpenVPN server on windows 10 pro; the service starts and I am able to connect to the service via the GUI on the server. As soon as I connect the server looses connectivity to the local lan. If I exit the GUI the local lan connectivity is regained. The clients can connect to the server while the GUI is connected but obviously they can't get to the local lan as there is no longer connectivity from the OpenVPN server to the local lan. I strongly suspect that this is a simple routing configuration problem but I don't see it. I have wasted too much time trying to figure out something that I suspect will be obvious to one of you guys. Thanks for your help! Some details: Regedit IPEnableRouter = 1 Router 10.0.3.1/255.255.0.0 Advanced routing Route: name OpenVPN Destination 10.0.8.0 mask 255.255.0.0 gateway 10.0.3.2 Interface Lan [b]Network config[/b] [oconf] open VPN: 10.0.8.0 255.255.0.0 openVPN server local network: 10.0.3.0 255.255.0.0 ovpn lan gateway: 10.0.3.0 openVPN server: 10.0.3.2 ovpn server network connections: Ethernet 2 (Linksys USB3GIGV1) Tcip V4 properties 10.0.3.2 mask 255.255.0.0 gateway 10.0.3.1 Saring with Tap Ethernet 3 (Realtek PCIe FE Family) DHCP WiFi (Intel(r) Dual Band wireless) DHCP TAP (TAP-Windows Adapter V9 #2) DHCP Ethernet (TAP-Windows Adapter) DHCP [/oconf] [b]Server.opvn[/b] [oconf=server] port 1194 proto tcp dev tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\server.crt" key "C:\\Program Files\\OpenVPN\\config\\server.key" dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem" tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0 server 10.0.8.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1 bypass-dhcp" route 10.0.3.0 255.255.255.0 push "route 10.0.3.0 255.255.255.0" client-to-client push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" keepalive 10 120 cipher AES-256-CBC comp-lzo persist-key persist-tun status openvpn-status.log verb 3 explicit-exit-notify 0 [/oconf] [b]Client config[/b] [oconf=client] client gregsphone dev tun proto tcp remote *** 1194 resolv-retry infinite nobind comp-lzo persist-key persist-tun remote-cert-tls server key-direction 1 cipher AES-256-CBC verb 3 float push "route 10.0.3.0 255.255.255.0 10.0.3.2" [/oconf] [b]Network config[/b] [oconf] open VPN: 10.0.8.0 255.255.0.0 openVPN server network: 10.0.3.0 255.255.0.0 ovpn lan gateway: 10.0.3.0 openVPN server: 10.0.3.2 ovpn server network connections: Ethernet 2 (Linksys USB3GIGV1) Tcip V4 properties 10.0.3.2 mask 255.255.0.0 gateway 10.0.3.1 Saring with Tap Ethernet 3 (Realtek PCIe FE Family) DHCP WiFi (Intel(r) Dual Band wireless) DHCP TAP (TAP-Windows Adapter V9 #2) DHCP Ethernet (TAP-Windows Adapter) DHCP [/oconf]

Try [b]disabling[/b] these lines by commenting them out: [list][*]Server config: [quote=oldandtired post_id=82037 time=1540498186 user_id=45450] [code]push "redirect-gateway def1 bypass-dhcp" route 10.0.3.0 255.255.255.0 push "route 10.0.3.0 255.255.255.0" client-to-client push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4"[/code] [/quote]Just test without these. [/list] [list][*]Client config: [quote=oldandtired post_id=82037 time=1540498186 user_id=45450] [code]push "route 10.0.3.0 255.255.255.0 10.0.3.2"[/code] [/quote]Clients cannot push directives. [/list] You may also find --[b]topology[/b] helps (See the [url=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage]manual[/url])

Installation configuration help

[deleted]

Using new install of OpenVPN server on windows 10 pro; the service starts and I am able to connect to the service via the GUI on the server. As soon as I connect the server looses connectivity to the local lan. If I exit the GUI the local lan connectivity is regained. The clients can connect to the server while the GUI is connected but obviously they can't get to the local lan as there is no longer connectivity from the OpenVPN server to the local lan.

I strongly suspect that this is a simple routing configuration problem but I don't see it. I have wasted too much time trying to figure out something that I suspect will be obvious to one of you guys. Thanks for your help!

Some details:
Regedit IPEnableRouter = 1

Router 10.0.3.1/255.255.0.0
Advanced routing Route: name OpenVPN Destination 10.0.8.0 mask 255.255.0.0 gateway 10.0.3.2 Interface Lan

Network config
[oconf]
open VPN:
10.0.8.0 255.255.0.0
openVPN server local network:
10.0.3.0 255.255.0.0
ovpn lan gateway:
10.0.3.0
openVPN server:
10.0.3.2

ovpn server network connections:
Ethernet 2 (Linksys USB3GIGV1) Tcip V4 properties 10.0.3.2 mask 255.255.0.0 gateway 10.0.3.1 Saring with Tap
Ethernet 3 (Realtek PCIe FE Family) DHCP
WiFi (Intel(r) Dual Band wireless) DHCP
TAP (TAP-Windows Adapter V9 #2) DHCP
Ethernet (TAP-Windows Adapter) DHCP
[/oconf]

Server.opvn

port 1194
proto tcp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
server 10.0.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
route 10.0.3.0 255.255.255.0
push "route 10.0.3.0 255.255.255.0"
client-to-client
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 0

Client config

client gregsphone
dev tun
proto tcp
remote *** 1194
resolv-retry infinite
nobind
comp-lzo
persist-key
persist-tun
remote-cert-tls server
key-direction 1
cipher AES-256-CBC
verb 3
float
push "route 10.0.3.0 255.255.255.0 10.0.3.2"

Network config
[oconf]
open VPN:
10.0.8.0 255.255.0.0
openVPN server network:
10.0.3.0 255.255.0.0
ovpn lan gateway:
10.0.3.0
openVPN server:
10.0.3.2

ovpn server network connections:
Ethernet 2 (Linksys USB3GIGV1) Tcip V4 properties 10.0.3.2 mask 255.255.0.0 gateway 10.0.3.1 Saring with Tap
Ethernet 3 (Realtek PCIe FE Family) DHCP
WiFi (Intel(r) Dual Band wireless) DHCP
TAP (TAP-Windows Adapter V9 #2) DHCP
Ethernet (TAP-Windows Adapter) DHCP
[/oconf]

TinCanTech

Try disabling these lines by commenting them out:

Server config:

oldandtired wrote

push "redirect-gateway def1 bypass-dhcp"
route 10.0.3.0 255.255.255.0
push "route 10.0.3.0 255.255.255.0"
client-to-client
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

Just test without these.

Client config:

oldandtired wrote

push "route 10.0.3.0 255.255.255.0 10.0.3.2"

Clients cannot push directives.

You may also find --topology helps (See the manual)

[deleted]

That helps now the server can reach the local network but the clients can not ping even the openvpn server: 10.0.3.2 they can ping 10.0.8.1