dugi25
1. Connection on the same lan - OK
2. Connection from other WiFi/Internet FAILED
Problem: Cannot access intranet (192.168.1.0)
Windows pc with VPN server:
Address IPv4 . . . . . . . . . . . : 192.168.1.11
Subnet mask . . . . . . . . . . : 255.255.255.0
GW . . . . . . . . . . : 192.168.1.1
Server log:
Thu Jan 24 00:15:18 2019 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Thu Jan 24 00:15:18 2019 Windows version 6.1 (Windows 7) 64bit
Thu Jan 24 00:15:18 2019 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Thu Jan 24 00:15:18 2019 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Thu Jan 24 00:15:18 2019 Need hold release from management interface, waiting...
Thu Jan 24 00:15:19 2019 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Thu Jan 24 00:15:19 2019 MANAGEMENT: CMD 'state on'
Thu Jan 24 00:15:19 2019 MANAGEMENT: CMD 'log all on'
Thu Jan 24 00:15:19 2019 MANAGEMENT: CMD 'echo all on'
Thu Jan 24 00:15:19 2019 MANAGEMENT: CMD 'hold off'
Thu Jan 24 00:15:19 2019 MANAGEMENT: CMD 'hold release'
Thu Jan 24 00:15:19 2019 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Jan 24 00:15:19 2019 Diffie-Hellman initialized with 4096 bit key
Thu Jan 24 00:15:19 2019 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 00:15:19 2019 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 00:15:19 2019 interactive service msg_channel=0
Thu Jan 24 00:15:19 2019 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=35 HWADDR=bc:ee:7b:20:57:d1
Thu Jan 24 00:15:19 2019 open_tun
Thu Jan 24 00:15:19 2019 TAP-WIN32 device [ServerVPN] opened: \\.\Global\{04204E36-D5F1-42F9-8823-D40A65F91E87}.tap
Thu Jan 24 00:15:19 2019 TAP-Windows Driver Version 9.21
Thu Jan 24 00:15:19 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.10.1/255.255.255.252 on interface {04204E36-D5F1-42F9-8823-D40A65F91E87} [DHCP-serv: 10.10.10.2, lease-time: 31536000]
Thu Jan 24 00:15:19 2019 Sleeping for 5 seconds...
Thu Jan 24 00:15:24 2019 Successful ARP Flush on interface [57] {04204E36-D5F1-42F9-8823-D40A65F91E87}
Thu Jan 24 00:15:24 2019 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Jan 24 00:15:24 2019 MANAGEMENT: >STATE:1548285324,ASSIGN_IP,,10.10.10.1,,,,
Thu Jan 24 00:15:24 2019 MANAGEMENT: >STATE:1548285324,ADD_ROUTES,,,,,,
Thu Jan 24 00:15:24 2019 C:\Windows\system32\route.exe ADD 10.10.10.0 MASK 255.255.255.0 10.10.10.2
Thu Jan 24 00:15:24 2019 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Jan 24 00:15:24 2019 Route addition via IPAPI succeeded [adaptive]
Thu Jan 24 00:15:24 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jan 24 00:15:24 2019 Listening for incoming TCP connection on [AF_INET][undef]:1194
Thu Jan 24 00:15:24 2019 TCPv4_SERVER link local (bound): [AF_INET][undef]:1194
Thu Jan 24 00:15:24 2019 TCPv4_SERVER link remote: [AF_UNSPEC]
Thu Jan 24 00:15:24 2019 MULTI: multi_init called, r=256 v=256
Thu Jan 24 00:15:24 2019 IFCONFIG POOL: base=10.10.10.4 size=62, ipv6=0
Thu Jan 24 00:15:24 2019 MULTI: TCP INIT maxclients=60 maxevents=64
Thu Jan 24 00:15:24 2019 Initialization Sequence Completed
Thu Jan 24 00:15:24 2019 MANAGEMENT: >STATE:1548285324,CONNECTED,SUCCESS,10.10.10.1,,,,
Server.config:
dev-node "ServerVPN"
mode server
port 1194
proto tcp4-server
dev tun
tls-server
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ta.key" 0
#tun-mtu 1500
#tun-mtu-extra 32
mssfix 1450
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\xx.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\xx.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\xx.pem"
server 10.10.10.0 255.255.255.0
client-to-client
keepalive 10 120
cipher AES-128-CBC
comp-lzo
persist-key
persist-tun
##skusam
status openvpn-status.log
push "redirect-gateway def1"
push "redirect-gateway local def1"
client-config-dir "C:\\Program Files\\OpenVPN\\config"
verb 3
route-delay 5
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "route 10.10.10.0 255.255.255.0 192.168.1.0 1"
Client config:
dev-node "ClientVPN"
remote ext_ip
client
port 1195
proto tcp4-client
dev tun
tls-client
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
remote-cert-tls server
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\xx.crt"
key "C:\\Program Files\\OpenVPN\\config\\xx.key"
cipher AES-128-CBC
comp-lzo
persist-key
persist-tun
verb 3
mute 20
On client I got error in browser: ERR_CONNECTION_REFUSED
Would be very thankful for any help!
