Open vpn works on android, it does not work on windows 10

m.92.grosso

Good evening, I am new in the group and I would like to take advantage of your help.
I have just put up the vpn network with all the configurations of the case, but now the vpn connects (offline) on android and works properly, instead on the pc does not connect.

Below is the log:

Wed Dec 19 19:19:37 2018 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Wed Dec 19 19:19:37 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Dec 19 19:19:37 2018 library versions: OpenSSL 1.1.0h  27 Mar 2018, LZO 2.10
Wed Dec 19 19:19:39 2018 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Wed Dec 19 19:19:39 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 19:19:39 2018 UDP link local: (not bound)
Wed Dec 19 19:19:39 2018 UDP link remote: [AF_INET]192.168.0.2:1194
Wed Dec 19 19:20:44 2018 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Wed Dec 19 19:20:44 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 19:20:44 2018 UDP link local: (not bound)
Wed Dec 19 19:20:44 2018 UDP link remote: [AF_INET]192.168.0.2:1194

Instead within the network connects immediately without problems, but I think it is normal.

How can I solve?

Thank you all

TinCanTech

m.92.grosso wrote the pc does not connect.

<snip>

Instead within the network connects immediately without problems

m.92.grosso wrote UDP link remote: [AF_INET]192.168.0.2:1194

That is a private network which cannot be routed over the internet, you need a public IP.

m.92.grosso

TinCanTech wrote
m.92.grosso wrote the pc does not connect.

<snip>

Instead within the network connects immediately without problems
m.92.grosso wrote UDP link remote: [AF_INET]192.168.0.2:1194
That is a private network which cannot be routed over the internet, you need a public IP.

I configured the dns on my router, and exported the configuration file directly from the router.
The address 192.168.0.2 is the ip wan from the 1st router to the 2nd where the vpn is configured.
The same configuration file I put it on android, and it works properly.
How is this difference possible?

Thank you

TinCanTech

You need a public IP address or you will not be able to connect to your VPN from anywhere but your LAN.

m.92.grosso

I have configured the ddns to connect outside the home and the vpn works correctly with android.
The problem is only with windows.

TinCanTech

See your server log for problems.

m.92.grosso

Wed Dec 19 20:29:05 2018 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Wed Dec 19 20:29:05 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Dec 19 20:29:05 2018 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10
Enter Management Password:
Wed Dec 19 20:29:07 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Dec 19 20:29:07 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:29:07 2018 UDP link local: (not bound)
Wed Dec 19 20:29:07 2018 UDP link remote: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:30:07 2018 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Dec 19 20:30:07 2018 SIGUSR1[soft,ping-restart] received, process restarting
Wed Dec 19 20:30:12 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Dec 19 20:30:12 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:30:12 2018 UDP link local: (not bound)
Wed Dec 19 20:30:12 2018 UDP link remote: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:31:12 2018 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Dec 19 20:31:12 2018 SIGUSR1[soft,ping-restart] received, process restarting
Wed Dec 19 20:31:18 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Dec 19 20:31:18 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:31:18 2018 UDP link local: (not bound)
Wed Dec 19 20:31:18 2018 UDP link remote: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:32:18 2018 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Dec 19 20:32:18 2018 SIGUSR1[soft,ping-restart] received, process restarting
Wed Dec 19 20:32:23 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Dec 19 20:32:23 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:32:23 2018 UDP link local: (not bound)
Wed Dec 19 20:32:23 2018 UDP link remote: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:33:23 2018 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Dec 19 20:33:23 2018 SIGUSR1[soft,ping-restart] received, process restarting
Wed Dec 19 20:33:28 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Dec 19 20:33:28 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.2:1194
Wed Dec 19 20:33:28 2018 UDP link local: (not bound)
Wed Dec 19 20:33:28 2018 UDP link remote: [AF_INET]192.168.0.2:1194

This is yesterday's log.
I repeat, with android I can connect to the ddns and consequently to the vpn correctly.

Thank you

TinCanTech

Like I said before .. see your server log for errors.

And I am fairly sure, what ever you have setup for your network, it is not configured correctly.

m.92.grosso

I forwarded the log.
I do not understand how to go with andoird and with windows no having set the same configuration.
Probably the problem lies in the primary modem that passes the internet to the secondary router with the configured vpn.
But I do not know how to solve.

TinCanTech

m.92.grosso wrote I forwarded the log.

That is not your server log.

m.92.grosso wrote do not understand how to go with andoird and with windows no having set the same configuration.
Probably the problem lies in the primary modem that passes the internet to the secondary router with the configured vpn.
But I do not know how to solve.

Sorry, we do not support your private network.

If all else fails then you can contact me privately: tincanteksup <at> gmail