Hi,
In my
main laptop, I have an openVPN client folder given to me by my company which I can use to work from home. But it's very weird the way it is acting; it establishes a connection but I am not able to access any of the company server links.
But, when I use my company laptop with the exact same files in \OpenVPN\config directory it still has the same problem
EXCEPT when I turn off my Ethernet network adapter and connect through WiFi, I can now access company server addresses... (Reason why I don't try this in my main laptop, is because WireLess capability is turned off and can't turn it back on for some reason)
For eg. when I access some of the company website URLs, it returns with the "This site can’t be reached xxxxxx.xxxxx.com’s server IP address could not be found."
Below I include the client-side .opvn file I use to connect:
client
dev tun
# UDP
#proto udp
#remote XXX.XXX.XXX.XX 1194
# TCP
proto tcp
remote XXX.XXX.XXX.XX 1196
# test within the xx network
# remote XX.XX.X.XX 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert zi-user.crt
key zi-user.key
verb 3
auth-user-pass
This is the client log I get when I connect (but still cannot access the company stuff)
Thu May 28 13:12:00 2020 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Thu May 28 13:12:00 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Thu May 28 13:12:00 2020 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Enter Management Password:
Thu May 28 13:12:00 2020 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Thu May 28 13:12:00 2020 Need hold release from management interface, waiting...
Thu May 28 13:12:01 2020 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Thu May 28 13:12:01 2020 MANAGEMENT: CMD 'state on'
Thu May 28 13:12:01 2020 MANAGEMENT: CMD 'log all on'
Thu May 28 13:12:01 2020 MANAGEMENT: CMD 'echo all on'
Thu May 28 13:12:01 2020 MANAGEMENT: CMD 'bytecount 5'
Thu May 28 13:12:01 2020 MANAGEMENT: CMD 'hold off'
Thu May 28 13:12:01 2020 MANAGEMENT: CMD 'hold release'
Thu May 28 13:12:02 2020 MANAGEMENT: CMD 'username "Auth" "[i]notshown[/i]"'
Thu May 28 13:12:02 2020 MANAGEMENT: CMD 'password [...]'
Thu May 28 13:12:02 2020 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu May 28 13:12:02 2020 TCP/UDP: Preserving recently used remote address: [AF_INET] [i]XXX.XXX.XXX.XX:1194[/i]
Thu May 28 13:12:02 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu May 28 13:12:02 2020 UDP link local: (not bound)
Thu May 28 13:12:02 2020 UDP link remote: [AF_INET][i]XXX.XXX.XXX.XX:1194[/i]
Thu May 28 13:12:02 2020 MANAGEMENT: >STATE:1590664322,WAIT,,,,,,
Thu May 28 13:12:02 2020 MANAGEMENT: >STATE:1590664322,AUTH,,,,,,
Thu May 28 13:12:02 2020 TLS: Initial packet from [AF_INET][i]XXX.XXX.XXX.XX:1194[/i], sid=e21e1c7a 8b20b767
Thu May 28 13:12:02 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu May 28 13:12:02 2020 VERIFY OK: depth=1, C=[i]notshown[/i], ST=[i]notshown[/i], L=[i]notshown[/i], O=[i]notshown[/i], CN=gate, emailAddress=info@[i]notshown[/i].com
Thu May 28 13:12:02 2020 VERIFY OK: depth=0, C=[i]notshown[/i], ST=[i]notshown[/i], L=[i]notshown[/i], O=[i]notshown[/i], CN=server, emailAddress=info@[i]notshown[/i].com
Thu May 28 13:12:02 2020 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 1024 bit RSA
Thu May 28 13:12:02 2020 [server] Peer Connection Initiated with [AF_INET][i]XXX.XXX.XXX.XX:1194[/i]
Thu May 28 13:12:03 2020 MANAGEMENT: >STATE:1590664323,GET_CONFIG,,,,,,
Thu May 28 13:12:03 2020 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu May 28 13:12:03 2020 PUSH: Received control message: 'PUSH_REPLY,route 10.42.0.0 255.255.0.0,dhcp-option DNS 10.42.0.10,dhcp-option DNS 10.42.0.15,dhcp-option DOMAIN [i]notshown[/i].com,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.62 10.8.0.61,peer-id 14,cipher AES-256-GCM'
Thu May 28 13:12:03 2020 OPTIONS IMPORT: timers and/or timeouts modified
Thu May 28 13:12:03 2020 OPTIONS IMPORT: --ifconfig/up options modified
Thu May 28 13:12:03 2020 OPTIONS IMPORT: route options modified
Thu May 28 13:12:03 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu May 28 13:12:03 2020 OPTIONS IMPORT: peer-id set
Thu May 28 13:12:03 2020 OPTIONS IMPORT: adjusting link_mtu to 1624
Thu May 28 13:12:03 2020 OPTIONS IMPORT: data channel crypto options modified
Thu May 28 13:12:03 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu May 28 13:12:03 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu May 28 13:12:03 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu May 28 13:12:03 2020 interactive service msg_channel=836
Thu May 28 13:12:03 2020 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=7 HWADDR=f0:1f:af:15:db:82
Thu May 28 13:12:03 2020 open_tun
Thu May 28 13:12:03 2020 TAP-WIN32 device [ZIVPN] opened: \\.\Global\{B39988E2-6257-415D-B1DD-79E9233767BF}.tap
Thu May 28 13:12:03 2020 TAP-Windows Driver Version 9.24
Thu May 28 13:12:03 2020 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.62/255.255.255.252 on interface {B39988E2-6257-415D-B1DD-79E9233767BF} [DHCP-serv: 10.8.0.61, lease-time: 31536000]
Thu May 28 13:12:03 2020 Successful ARP Flush on interface [14] {B39988E2-6257-415D-B1DD-79E9233767BF}
Thu May 28 13:12:03 2020 MANAGEMENT: >STATE:1590664323,ASSIGN_IP,,10.8.0.62,,,,
Thu May 28 13:12:08 2020 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Thu May 28 13:12:08 2020 MANAGEMENT: >STATE:1590664328,ADD_ROUTES,,,,,,
Thu May 28 13:12:08 2020 C:\WINDOWS\system32\route.exe ADD 10.42.0.0 MASK 255.255.0.0 10.8.0.61
Thu May 28 13:12:08 2020 Route addition via service succeeded
Thu May 28 13:12:08 2020 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.61
Thu May 28 13:12:08 2020 Route addition via service succeeded
Thu May 28 13:12:08 2020 Initialization Sequence Completed
Thu May 28 13:12:08 2020 MANAGEMENT: >STATE:1590664328,CONNECTED,SUCCESS,10.8.0.62,[i]XXX.XXX.XXX.XX[/i],[i]XXXX[/i],,
In the log above, I've replaced the IP address and name of company with
not shown or
XXX.XXX.XXX.XX
I feel like I am missing something here... I'm not knowledgable of openVPN, or rather networking too much.
Thanks
