gpane
On the server i have TWO network interface
One with IP 151.3.100.102, i use it for connect from external
One with IP 192.168.10.2
The internal LAN is on 192.168.10.X
I want to access all the LAN from the VPN (specially two machines, 192.168.10.10 and 192.168.10.11) when i'm not inside the office
Both are WINDOWS, Server is Windows Server 2012 and clients are Windows 10
Thanks
server:
port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
;dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
crl-verify "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\crl.pem"
client-config-dir "C:\\Program Files\\OpenVPN\\ccd"
server 10.16.0.0 255.255.0.0
persist-key
persist-tun
float
topology subnet
ifconfig-pool-persist ipp.txt
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 8.8.8.8"
;push "dhcp-option DNS 8.8.4.4"
push "route 192.168.10.0 255.255.255.0"
push "dhcp-option DNS 192.168.10.1"
push "dhcp-option WINS 192.168.10.1"
keepalive 10 120
client-to-client
tls-version-min 1.2
cipher AES-128-GCM
ncp-disable
tls-ciphersuites TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
tls-cipher TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
dh none
ecdh-curve secp384r1
tls-server
remote-cert-tls client
verify-client-cert require
tls-cert-profile preferred
comp-lzo
explicit-exit-notify 1
opt-verify
status openvpn-status.log
verb 3
client
client
dev tun
proto udp
remote 151.3.100.102 1194
resolv-retry infinite
nobind
comp-lzo
persist-key
persist-tun
remote-cert-tls server
key-direction 1
tls-version-min 1.2
cipher AES-128-GCM
ncp-disable
tls-ciphersuites TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
tls-cipher TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
ecdh-curve secp384r1
tls-client
tls-cert-profile preferred
verb 3
300000
you need to setup ip forward and internet sharing so it will work for you , on windows server you need add role routing and remote access and create NAT both openvpn network card and real internet interface
gpane
Hi
Thanks for the answer. Can you exaplain please a little bit? Are days and hours i'm tring to make this working. I have read and try i don't know how many things
On the server i have enabled IPEnableRouter on 1 and rebooted the machine
I need to enable also on the every client?
Internet sharing? Where? On the LAN interface?
What routing role i need to do? On the config of the server, on the ccd?
How i can create NAT between openvpn and LAN network? Do you mean bridge when you select both network card?
Thanks, i'm on your hands
300000
no. you need to install routingandremote access on windows server so it can act NAT and ip forward so client can go out .routingandremote access do that all for you.
gpane
Well, i have do the NAT and now i can see the LAN! Thanks
