No internet traffic between client and server

mili82

Hello guys,

I will try to divide my post in two or three posts, since I am having trouble with posting (forums anti-spam).
----------------------------

I am new at this, so forgive my lack of knowledge about OpenVPN and networking, I am almost a total beginner.

I am trying to connect my home computer as client (Win 7) to VPS as VPN server(Win 7). My goal is to redirect internet traffic from my home computer to VPS, and to obtain the same public IP address for home computer as I have on VPS. More precisely, it is not necessary that I obtain public IP from VPS for all internet traffic on my home computer. The best solution will be if I can have VPS public IP only when I use a particular app at my home computer, for example: Skype. I don't know if this is possible to achieve?

I managed to establish the connection between home computer and VPS and I get Assigned IP: 10.8.0.6. I tried to redirect internet traffic, but with no luck. When I am connected, I dont have internet access at all. I tried many configurations, I changed Routing and Remote Access and set it to Automatic,I ticked the box "Allow other network users to connect through this computer's Internet connection" in my Local Area Connection Properties (couldnt find drop-down list to select TAP connection), IPEnableRouter setted to 1 on VPS and on home computer, tried everything I found on internet, but no luck.

If anybody can help me with this, I am losing my mind.

In the next post I will try to show my config files on VPS (server), home computer (client) and client log file when I am connected.

TinCanTech

Please see this for an example:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

mili82

Server.ovpn (Win7 64bit):

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
tls-auth ta.key 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
verb 4
status openvpn-status.log
verb 3
explicit-exit-notify 1

mili82

Client.ovpn (Win7 64bit):

client

dev tun

proto udp

remote xxx.xxx.xx.xx 1194

redirect-gateway def1

resolv-retry infinite

nobind

persist-key

persist-tun

remote-cert-tls server

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"

cert "C:\\Program Files\\OpenVPN\\config\\CLIENT.crt"

key "C:\\Program Files\\OpenVPN\\config\\CLIENT.key"

tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1

cipher AES-256-CBC

verb 4

verb 3

Server log file:


Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 TLS: Initial packet from [AF_INET6]::ffff:"CLIENT PUBLIC IP":59383, sid=7f23cfb3 a59125cc
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=changeme, CN=ca, name=ca, emailAddress=mail@host.domain
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=changeme, CN=CLIENT, name=CLIENT, emailAddress=mail@host.domain
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_VER=2.4.7
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_PLAT=win
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_PROTO=2
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_NCP=2
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_LZ4=1
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_LZ4v2=1
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_LZO=1
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_COMP_STUB=1
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_COMP_STUBv2=1
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_TCPNL=1
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 peer info: IV_GUI_VER=OpenVPN_GUI_11
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Fri Jul 05 16:33:28 2019 "CLIENT PUBLIC IP":59383 [CLIENT] Peer Connection Initiated with [AF_INET6]::ffff:"CLIENT PUBLIC IP":59383
Fri Jul 05 16:33:28 2019 MULTI: new connection by client 'CLIENT' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Fri Jul 05 16:33:28 2019 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Fri Jul 05 16:33:28 2019 MULTI: Learn: 10.8.0.6 -> CLIENT/"CLIENT PUBLIC IP":59383
Fri Jul 05 16:33:28 2019 MULTI: primary virtual IP for CLIENT/"CLIENT PUBLIC IP":59383: 10.8.0.6
Fri Jul 05 16:33:29 2019 CLIENT/"CLIENT PUBLIC IP":59383 PUSH: Received control message: 'PUSH_REQUEST'
Fri Jul 05 16:33:29 2019 CLIENT/"CLIENT PUBLIC IP":59383 SENT CONTROL [CLIENT]: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM' (status=1)
Fri Jul 05 16:33:29 2019 CLIENT/"CLIENT PUBLIC IP":59383 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jul 05 16:33:29 2019 CLIENT/"CLIENT PUBLIC IP":59383 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jul 05 16:33:29 2019 CLIENT/"CLIENT PUBLIC IP":59383 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

mili82

Client log file:


Fri Jul 05 18:33:20 2019 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Fri Jul 05 18:33:20 2019 Windows version 6.1 (Windows 7) 64bit
Fri Jul 05 18:33:20 2019 library versions: OpenSSL 1.1.0j  20 Nov 2018, LZO 2.10
Enter Management Password:
Fri Jul 05 18:33:20 2019 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Jul 05 18:33:20 2019 Need hold release from management interface, waiting...
Fri Jul 05 18:33:21 2019 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Jul 05 18:33:21 2019 MANAGEMENT: CMD 'state on'
Fri Jul 05 18:33:21 2019 MANAGEMENT: CMD 'log all on'
Fri Jul 05 18:33:21 2019 MANAGEMENT: CMD 'echo all on'
Fri Jul 05 18:33:21 2019 MANAGEMENT: CMD 'bytecount 5'
Fri Jul 05 18:33:21 2019 MANAGEMENT: CMD 'hold off'
Fri Jul 05 18:33:21 2019 MANAGEMENT: CMD 'hold release'
Fri Jul 05 18:33:21 2019 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jul 05 18:33:21 2019 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jul 05 18:33:21 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]XXX.XXX.XX.XX:1194
Fri Jul 05 18:33:21 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Jul 05 18:33:21 2019 UDP link local: (not bound)
Fri Jul 05 18:33:21 2019 UDP link remote: [AF_INET]XXX.XXX.XX.XX:1194
Fri Jul 05 18:33:21 2019 MANAGEMENT: >STATE:1562344401,WAIT,,,,,,
Fri Jul 05 18:33:21 2019 MANAGEMENT: >STATE:1562344401,AUTH,,,,,,
Fri Jul 05 18:33:21 2019 TLS: Initial packet from [AF_INET]XXX.XXX.XX.XX:1194, sid=36fc4a0a 87073aed
Fri Jul 05 18:33:21 2019 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=changeme, CN=ca, name=ca, emailAddress=mail@host.domain
Fri Jul 05 18:33:21 2019 VERIFY KU OK
Fri Jul 05 18:33:21 2019 Validating certificate extended key usage
Fri Jul 05 18:33:21 2019 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Jul 05 18:33:21 2019 VERIFY EKU OK
Fri Jul 05 18:33:21 2019 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=changeme, CN=server, name=server, emailAddress=mail@host.domain
Fri Jul 05 18:33:21 2019 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Fri Jul 05 18:33:21 2019 [server] Peer Connection Initiated with [AF_INET]XXX.XXX.XX.XX:1194
Fri Jul 05 18:33:22 2019 MANAGEMENT: >STATE:1562344402,GET_CONFIG,,,,,,
Fri Jul 05 18:33:22 2019 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Jul 05 18:33:22 2019 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM'
Fri Jul 05 18:33:22 2019 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jul 05 18:33:22 2019 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jul 05 18:33:22 2019 OPTIONS IMPORT: route options modified
Fri Jul 05 18:33:22 2019 OPTIONS IMPORT: peer-id set
Fri Jul 05 18:33:22 2019 OPTIONS IMPORT: adjusting link_mtu to 1624
Fri Jul 05 18:33:22 2019 OPTIONS IMPORT: data channel crypto options modified
Fri Jul 05 18:33:22 2019 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jul 05 18:33:22 2019 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jul 05 18:33:22 2019 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jul 05 18:33:22 2019 interactive service msg_channel=404
Fri Jul 05 18:33:22 2019 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=10 HWADDR=54:04:a6:c1:87:8e
Fri Jul 05 18:33:22 2019 open_tun
Fri Jul 05 18:33:22 2019 TAP-WIN32 device [TAP] opened: \\.\Global\{C9A05624-6954-43D6-9B7A-DD7D0FC1C910}.tap
Fri Jul 05 18:33:22 2019 TAP-Windows Driver Version 9.23 
Fri Jul 05 18:33:22 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C9A05624-6954-43D6-9B7A-DD7D0FC1C910} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri Jul 05 18:33:22 2019 Successful ARP Flush on interface [16] {C9A05624-6954-43D6-9B7A-DD7D0FC1C910}
Fri Jul 05 18:33:22 2019 MANAGEMENT: >STATE:1562344402,ASSIGN_IP,,10.8.0.6,,,,
Fri Jul 05 18:33:27 2019 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Jul 05 18:33:27 2019 C:\Windows\system32\route.exe ADD XXX.XXX.XX.XX MASK 255.255.255.255 192.168.1.1
Fri Jul 05 18:33:27 2019 Route addition via service succeeded
Fri Jul 05 18:33:27 2019 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri Jul 05 18:33:27 2019 Route addition via service succeeded
Fri Jul 05 18:33:27 2019 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri Jul 05 18:33:27 2019 Route addition via service succeeded
Fri Jul 05 18:33:27 2019 MANAGEMENT: >STATE:1562344407,ADD_ROUTES,,,,,,
Fri Jul 05 18:33:27 2019 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Fri Jul 05 18:33:27 2019 Route addition via service succeeded
Fri Jul 05 18:33:27 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jul 05 18:33:27 2019 Initialization Sequence Completed
Fri Jul 05 18:33:27 2019 MANAGEMENT: >STATE:1562344407,CONNECTED,SUCCESS,10.8.0.6,XXX.XXX.XX.XX,1194,,

TinCanTech

mili82 wrote I am trying to connect my home computer as client (Win 7) to VPS as VPN server(Win 7)

Why Windows 7 as a server ? It will be EOL next year ..

mili82

I thought that better option for OpenVpn will be if I install the same Windows on both, server and client.

I will install Win 10 on server, but my first problem is how to resolve my problem about internet traffic, and how to assign server's public IP address to client, so client can have the same public IP.

if anybody can help here, I tried many things, and nothing works for me?

TinCanTech

Openvpn server is far more compatible with a *nix OS .. and much of the documentation leans that way.

If you are new to Linux then try Ubuntu or Debian.

If you stay with Windows you may have to use the "nathack" for windows hack.

mili82

Thank you for trying to help.

It is not important that I have Windows on my server, only on client computer. The important thing is that I establish the fastest connection between client and server. I am using a particular app on my client computer, and the point is to obtain server's public IP for client computer, so I could use this app.

What what you suggest me to do? What OS to install on server? Please be aware that I have no knowledge about other OSs. I am still confused with all information about LAN,WAN, behind router, port forwarding, subnet, routing,DNS server, internal IP, external IP...this is almost as Chinese to me. I hardly manage to establish any kind of connection between server and client. I am doing my best, but I have a headache because of this. I would like to know how to do this on my own, but I need help. I will need some kind of step by step tutorial, to be able to achieve what I need.