AgentWorm Set up: Both client and server Debian Jessie regular PPA install. Traffic through Archer C7 router NAT to Comcast fixed ip. I can connect and ping happily using the *Configurations* given below. I am -not- attempting to redirect client traffic through the server, at least not yet. I have normal internet/browser behavior on both machines until I transfer data between the machines via the VPN. I can make a samba connection to the server through the nautilus app on my client, seeing all available folders and their contents as usual. When I transfer a file from server to client however, I immediately lose access to the WAN and internet on the client. I cannot ping beyond my local network, and cannot reach further or perform DNS lookups. What am I missing, or mis-configuring? Thanks for any light/guidance you can shed greatly appreciated. *Configurations* =server config==================================================== # Which local IP address should OpenVPN # listen on? (optional) local 192.168.222.4 port 1197 proto udp dev tun1 ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh1024.pem server 10.8.99.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" keepalive 10 120 comp-lzo # The maximum number of concurrently connected # clients we want to allow. max-clients 5 persist-key persist-tun status openvpn-status.log log openvpn.log log-append openvpn.log verb 3 =end server config============================================ =client config================================================ # All Extraneous Removed from Sample Config client dev tun proto udp remote xxx.xxx.xxx.xxx 1197 resolv-retry infinite nobind persist-key persist-tun comp-lzo verb 3 # imbedded security keys redacted for this post# =end client config==========================================
AgentWorm Additional info. I should have said I lose internet connectivity on the server. The client still has internet access through its normal (non-vpn) connection to the router.
TinCanTech The best thing you can do is port your logs, as per: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963
