Connection is established, but unable to ping

jankojc

Hello.

For some time I am trying to configure VPN connection between server in my office and my laptop. I have studied a lot of articles, but I cand find out, where the problem is. I need to have acces to sources shared in offices local network which are located on server, where I am trying to setup the OpenVPN server. I have followed the instructions from these video:
https://www.youtube.com/watch?v=hKfHwQgAsUo&ab_channel=HetmanSoftware%3ADataRecoveryforWindows

The server is working, the IP adress is alocated as 10.10.10.1, so it agrees with config file. The client is conecting to the server too, the IP adress is alocated as 10.10.10.5 which agrees with config file definied for client too.

The office LAN is working with pool adress 192.168.0.0 255.255.255.0. The server IP, where te source are shared has the IP 192.168.0.213. The router is also the gateway with adress 192.168.0.1. The network is working behind the NAT, I have done port forwarding for port 1194 TCP/UDP to adress 192.168.0.213.

As I say above, the connections are established, but I am unable to pink the server from client and vice versa (Request time out).

Here you have the content of config file for server:

dev-node "ServerVPN"
mode server
port 1194

proto tcp4-server
dev tun

tls-server
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ta.key" 0

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ServerVPN.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ServerVPN.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh2048.pem"

server 10.10.10.0 255.255.255.0

client-to-client
keepalive 10 120
cipher AES-128-CBC
comp-lzo

persist-key
persist-tun

client-config-dir "C:\\Program Files\\OpenVPN\\config"

verb 3

route-delay 5
route-method exe

push "route 192.168.0.0 255.255.255.0"
route 192.168.182.0 255.255.255.0

Additional config for server:

ifconfig-push 10.10.10.5 10.10.10.6
iroute 192.168.182.0 255.255.255.0
# disable

And the Client config file:

remote [server adress from DDNS}
client
port 1194

proto tcp4-client
dev tun

tls-client
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
remote-cert-tls server

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\ClientVPN.crt"
key "C:\\Program Files\\OpenVPN\\config\\ClientVPN.key"

cipher AES-128-CBC
comp-lzo

persist-key
persist-tun

verb 3
mute 20

Thank you for yours respones, I hope anyone can help me to resolve the problem.

TinCanTech

Check your fireballs ..

jankojc

You mean firewalls 🙂?

I have disabled the firewall on my router and system firewall on serwer and client too - no effect.I have also checked the rules, incoming and outgoings rules are enabled for OpenVPN and the ports I needed.

jankojc

I have disabled the windows firewall again, for server and the client also, and I don't know why, but it works correctly. But I think, disabling firewall completly is not a good way to resolve the problem. Do you have any ideas, what rules on firewall should I create? At the moment I have following rules, for server and the client, for incoming and outgoing connetion(allow):

Port 1194 TCP/UDP for all aplications, for privat and public networks
aplication "openvpn.exe" and "openvpn-gui.exe" for all ports, for privat and public networks

But it doesn't works with settings typed above. Do you know, what rules exactly do I need to configure?