Hi everyone,
I'm aware this has been answered a few times before but I'm struggling here after a couple of days of messing with configs so I'm hoping for some help/a push in the right direction.
I can connect to the VPN with no problems but I lose internet connectivity on the client (MacOSX). What am I doing wrong?
First, the info:
Server
- OpenVPN server running on Windows Server 2016
- Port forwarded from router to 1194
- local LAN subnet 10.10.x
- Firewall allows VPN in and out
- Set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter to 1
- Checked "Allow other network users to connect through this computer's internet connection" on the ethernet connection
local a.b.c.d
port 1194
proto udp
dev tun
;dev-node "Tap"
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem"
;topology subnet
server 10.8.0.0 255.255.255.0
;server-bridge 10.10.10.99 255.255.255.0 10.10.10.235 10.10.10.254
ifconfig-pool-persist ipp.txt
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;push "route 10.10.10.0 255.255.255.0"
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
push "redirect-gateway def1"
;push "dhcp-option DNS 10.10.10.1"
push "dhcp-option DNS 8.8.8.8"
;push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"
client-to-client
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
;compress lz4-v2
;push "compress lz4-v2"
;comp-lzo
;max-clients 100
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
# Set the appropriate level of log
# file verbosity.
#
# 0 is silent, except for fatal errors
# 4 is reasonable for general usage
# 5 and 6 can help to debug connection problems
# 9 is extremely verbose
verb 3
;mute 20
explicit-exit-notify 1
Client
- Latest MacOSX running latest Tunnelblick
client
dev tun
;dev-node MyTap
proto udp
remote <server-ip> 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca "/Users/lee/Documents/keys/lee/ca.crt"
cert "/Users/lee/Documents/keys/lee/lee.crt"
key "/Users/lee/Documents/keys/lee/lee.key"
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
#comp-lzo
verb 3
;mute 20
