Hello,
i am running OpenVPN on my Windows Server 2019 Essentials. Everything is good so far and my clients can connect to the server and acces it with the local IP 10.8.0.1.
The first problem is that i need to access the server with it's "home-network IP" (which is: 192.168.178.30) because some applications use the IP adress.
The second problem is that i can't access any othe device "behind" the server in my local network (for example printers).
I searched for hours to solve my problem and as far as i know it should have to do something with the routing (but I don't really understand this).
Overview about my Setup:
FritzBox (Internet Gateway): 192.168.178.1
Windows Server (OpenVPN Server): 192.168.178 (local LAN) and 10.8.0.1 (in OpenVPN)
Other LAN-device: 192.168.178.xxx
(xxx is just a dummy value)
port 1194
proto udp
dev tun
ca "xxx"
cert "xxx"
key "xxx" # This file should be kept secret
dh "xxx"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
script-security 3
auth-user-pass-verify C:\\OpenVPN\\config\\auth.bat via-env
auth SHA256
push "route 192.168.178.0 255.255.255.0"
client
dev tun
proto udp
remote xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "xxx"
cert "xxx"
key "xxx"
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
verb 3
script-security 2
auth-user-pass
auth SHA256
If I use cmd for ping on my connected Windows 10 device i get:
C:\Users\simon>ping 10.8.0.1
Ping wird ausgeführt für 10.8.0.1 mit 32 Bytes Daten:
Antwort von 10.8.0.1: Bytes=32 Zeit=2ms TTL=128
Antwort von 10.8.0.1: Bytes=32 Zeit=2ms TTL=128
Antwort von 10.8.0.1: Bytes=32 Zeit=3ms TTL=128
Antwort von 10.8.0.1: Bytes=32 Zeit=3ms TTL=128
Ping-Statistik für 10.8.0.1:
Pakete: Gesendet = 4, Empfangen = 4, Verloren = 0
(0% Verlust),
Ca. Zeitangaben in Millisek.:
Minimum = 2ms, Maximum = 3ms, Mittelwert = 2ms
C:\Users\simon>ping 192.168.178.30
Ping wird ausgeführt für 192.168.178.30 mit 32 Bytes Daten:
Zeitüberschreitung der Anforderung.
Zeitüberschreitung der Anforderung.
...
Moreover i added this static ipv4 route to my router (FritzBox):
IPv4-network: 10.8.0.1
Mask: 255.255.255.0
Gateway: 192.168.178.30
I really hope someone could help me. I think it should just be a small thing i don't see.
Moreover if you see any security concerns please let me know (would be great to know hot it should be) 😃
