Router is Reachable. LAN Clients in Network not.

Fry1990

OpenVPN PC Server IP: 192.168.1.150
OpenVPN Server: 10.8.0.1
OpenVPN Network: 10.8.0.1 255.255.255.0
Router: 192.168.1.1
Router Network: 192.168.1.0 255.255.255.0

OpenVPN Client: 10.8.0.2 255.255.255.0

Routes:
===========================================================================
Schnittstellenliste
19...00 01 2e 4e d1 19 ......Realtek PCIe GbE Family Controller
7...00 ff 48 4c 93 9a ......TAP-Windows Adapter V9
12...00 c2 c6 4b 37 0e ......Bluetooth Device (Personal Area Network)
1...........................Software Loopback Interface 1
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.150 281
10.8.0.0 255.255.255.0 Auf Verbindung 192.168.1.150 26
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 25
10.8.0.0 255.255.255.252 Auf Verbindung 10.8.0.1 281
10.8.0.1 255.255.255.255 Auf Verbindung 10.8.0.1 281
10.8.0.3 255.255.255.255 Auf Verbindung 10.8.0.1 281
10.8.0.255 255.255.255.255 Auf Verbindung 192.168.1.150 281
127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 331
127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 331
127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 331
192.168.1.0 255.255.255.0 192.168.1.1 192.168.1.150 26
192.168.1.150 255.255.255.255 Auf Verbindung 192.168.1.150 281
224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 331
224.0.0.0 240.0.0.0 Auf Verbindung 192.168.1.150 281
224.0.0.0 240.0.0.0 Auf Verbindung 10.8.0.1 281
255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 331
255.255.255.255 255.255.255.255 Auf Verbindung 192.168.1.150 281
255.255.255.255 255.255.255.255 Auf Verbindung 10.8.0.1 281
===========================================================================
St„ndige Routen:
Netzwerkadresse Netzmaske Gatewayadresse Metrik
10.8.0.0 255.255.255.0 192.168.1.150 1
0.0.0.0 0.0.0.0 192.168.1.1 Standard
===========================================================================

IPv6-Routentabelle
===========================================================================
Aktive Routen:
If Metrik Netzwerkziel Gateway
1 331 ::1/128 Auf Verbindung
7 281 fe80::/64 Auf Verbindung
7 281 fe80::191a:400b:f89d:75a/128
Auf Verbindung
1 331 ff00::/8 Auf Verbindung
7 281 ff00::/8 Auf Verbindung
===========================================================================
St„ndige Routen:
Keine

Server Config

port 443

proto udp
dev tun
ca **.crt
cert **.crt
key **.key # This file should be kept secret

dh dh2048.pem

topology subnet

server 10.8.0.0 255.255.255.0

client-to-client
keepalive 10 120
cipher AES-128-CBC # AES
comp-lzo

persist-key
persist-tun

status openvpn-status.log

verb 4

ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1 bypass-dhcp"

local 192.168.1.150

Client Config:

dev tun

proto udp

remote **.spdns.de 443

ca ca1.crt

cert client1.crt

key client1.key

cipher AES-128-CBC

auth SHA1

resolv-retry infinite

nobind

persist-key

persist-tun

client

verb 3

auth-user-pass

comp-lzo

Static Route in Client:
Destination IP: 10.8.0.0
Subnet: 255.255.255.0
Gateway: 192.168.1.150

I can connect.
SMB from 191.168.1.150 is reachable.

Ping on 192.168.1.150 is 10ms
Ping on 10.8.0.1 is 10ms
Ping on 192.168.1.1 is 10ms
Ping on 192.168.1.141 time out (141 is a linux client)
Ping on 192.168.1.160 time out (160 is an other linux client)

Have enabled routing and ras service.
Have done the regedit ipforward.

What is wrong??

Sorry for new topic. But now i have a different config cause the last one is not working anymore.

TinCanTech

Fry1990 wrote Ping on 192.168.1.150 is 10ms
Ping on 10.8.0.1 is 10ms
Ping on 192.168.1.1 is 10ms
Ping on 192.168.1.141 time out (141 is a linux client)
Ping on 192.168.1.160 time out (160 is an other linux client)

The linux boxes need to know the route for 10.8.0.0/24

Also, using 192.168.1.0/24 for your LAN is a bad idea and if you read your server log it will tell you why.

Fry1990

Have fixed my Problem.
Route
192.168.1.0 255.255.255.0 192.168.1.1 192.168.1.150 26
was wrong.
Needed
192.168.1.0 255.255.255.0 192.168.1.150
now its running. perhaps i will change my lan network....
would 192.168.10.0 ok?

Fry1990

Iam soooo angry about configuring openvpn over and over again.
Once its running so that i can reach all LAN Server/Clients (smb) from the OpenVPN Server side....
after restart of my Windows 10 PC on which OpenVPN Server is installed i can no longer reach them.
Any Help?
My Configuration is still the same... sometimes with little tryouts and rollbacks to the origin code i posted.

i even cant reach my Router on the LAN with the OpenVPN Server.
Router 192.168.1.1 (cant ping. timeout is given
OpenVPN Server PC 192.168.1.150 (can ping 10ms)
OpenVPN IP 10.8.0.1 (can ping 10ms)