i have installed openvpn in centos 7.5 using github script. i am able to connect openvpn server and access my servers from my client device window 10 but as soon as i connected my local internet just stopped working........ However in network setting status show internet is working sending and reciving the packets. kindly find my server and .ovpn details below. _______________________________client_________________________________ client proto udp explicit-exit-notify remote 164.52.216.107 1194 dev tun resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server verify-x509-name server_7IiBwZCkZsRpkVFn name auth SHA256 auth-nocache cipher AES-128-GCM tls-client tls-version-min 1.2 tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 ignore-unknown-option block-outside-dns setenv opt block-outside-dns # Prevent Windows 10 DNS leak verb 3 _______________________________________-server___________________________ port 1194 proto udp dev tun user nobody group nobody persist-key persist-tun keepalive 10 120 topology subnet server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt ;push "dhcp-option DNS 94.140.14.14" ;push "dhcp-option DNS 94.140.15.15" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" ;push "redirect-gateway def1 bypass-dhcp" push "redirect-gateway def1" ____________________________________________________ Kindly let me know where i went wrong Thanks in advance

Can you access other computer on server side when connected? if you cant and only can access openvpn server . it mean you need ip forward and nat at openvpn server. only said no internet not help at all . there are many thing make it stop and you need post log client too .

yes i can connect to other computers on servers side as well apart from openvpn server.... _____________________client log file___________________________________________________ 2021-07-28 16:56:10 OpenVPN 2.5.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 17 2021 2021-07-28 16:56:10 Windows version 10.0 (Windows 10 or greater) 64bit 2021-07-28 16:56:10 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10 Enter Management Password: 2021-07-28 16:56:10 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341 2021-07-28 16:56:10 Need hold release from management interface, waiting... 2021-07-28 16:56:10 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341 2021-07-28 16:56:10 MANAGEMENT: CMD 'state on' 2021-07-28 16:56:10 MANAGEMENT: CMD 'log all on' 2021-07-28 16:56:10 MANAGEMENT: CMD 'echo all on' 2021-07-28 16:56:10 MANAGEMENT: CMD 'bytecount 5' 2021-07-28 16:56:10 MANAGEMENT: CMD 'hold off' 2021-07-28 16:56:10 MANAGEMENT: CMD 'hold release' 2021-07-28 16:56:10 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key 2021-07-28 16:56:10 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication 2021-07-28 16:56:10 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key 2021-07-28 16:56:10 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication 2021-07-28 16:56:10 TCP/UDP: Preserving recently used remote address: [AF_INET]164.52.216.107:1194 2021-07-28 16:56:10 Socket Buffers: R=[65536->65536] S=[65536->65536] 2021-07-28 16:56:10 UDP link local: (not bound) 2021-07-28 16:56:10 UDP link remote: [AF_INET]164.52.216.107:1194 2021-07-28 16:56:10 MANAGEMENT: >STATE:1627471570,WAIT,,,,,, 2021-07-28 16:56:10 MANAGEMENT: >STATE:1627471570,AUTH,,,,,, 2021-07-28 16:56:10 TLS: Initial packet from [AF_INET]164.52.216.107:1194, sid=62a63527 f74101ae 2021-07-28 16:56:11 VERIFY OK: depth=1, CN=cn_pUm5lfUNZAcFnaCU 2021-07-28 16:56:11 VERIFY KU OK 2021-07-28 16:56:11 Validating certificate extended key usage 2021-07-28 16:56:11 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2021-07-28 16:56:11 VERIFY EKU OK 2021-07-28 16:56:11 VERIFY X509NAME OK: CN=server_7IiBwZCkZsRpkVFn 2021-07-28 16:56:11 VERIFY OK: depth=0, CN=server_7IiBwZCkZsRpkVFn 2021-07-28 16:56:11 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, peer certificate: 256 bit EC, curve prime256v1, signature: ecdsa-with-SHA256 2021-07-28 16:56:11 [server_7IiBwZCkZsRpkVFn] Peer Connection Initiated with [AF_INET]164.52.216.107:1194 2021-07-28 16:56:12 MANAGEMENT: >STATE:1627471572,GET_CONFIG,,,,,, 2021-07-28 16:56:12 SENT CONTROL [server_7IiBwZCkZsRpkVFn]: 'PUSH_REQUEST' (status=1) 2021-07-28 16:56:12 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-128-GCM' 2021-07-28 16:56:12 OPTIONS IMPORT: timers and/or timeouts modified 2021-07-28 16:56:12 OPTIONS IMPORT: --ifconfig/up options modified 2021-07-28 16:56:12 OPTIONS IMPORT: route options modified 2021-07-28 16:56:12 OPTIONS IMPORT: route-related options modified 2021-07-28 16:56:12 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2021-07-28 16:56:12 OPTIONS IMPORT: peer-id set 2021-07-28 16:56:12 OPTIONS IMPORT: adjusting link_mtu to 1624 2021-07-28 16:56:12 OPTIONS IMPORT: data channel crypto options modified 2021-07-28 16:56:12 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28 16:56:12 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28 16:56:12 interactive service msg_channel=664 2021-07-28 16:56:12 ROUTE_GATEWAY 192.168.29.1/255.255.255.0 I=22 HWADDR=d8:9c:67:4e:93:fd 2021-07-28 16:56:12 open_tun 2021-07-28 16:56:12 tap-windows6 device [OpenVPN TAP-Windows6] opened 2021-07-28 16:56:12 TAP-Windows Driver Version 9.24 2021-07-28 16:56:12 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED] 2021-07-28 16:56:12 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {5EE52799-7F39-46FA-B038-2698B4A84523} [DHCP-serv: 10.8.0.254, lease-time: 31536000] 2021-07-28 16:56:12 Successful ARP Flush on interface [17] {5EE52799-7F39-46FA-B038-2698B4A84523} 2021-07-28 16:56:12 MANAGEMENT: >STATE:1627471572,ASSIGN_IP,,10.8.0.2,,,, 2021-07-28 16:56:12 IPv4 MTU set to 1500 on interface 17 using service 2021-07-28 16:56:12 Blocking outside dns using service succeeded. 2021-07-28 16:56:17 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up 2021-07-28 16:56:17 C:\WINDOWS\system32\route.exe ADD 164.52.216.107 MASK 255.255.255.255 192.168.29.1 2021-07-28 16:56:17 Route addition via service succeeded 2021-07-28 16:56:17 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1 2021-07-28 16:56:17 Route addition via service succeeded 2021-07-28 16:56:17 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1 2021-07-28 16:56:17 Route addition via service succeeded 2021-07-28 16:56:17 Initialization Sequence Completed 2021-07-28 16:56:17 MANAGEMENT: >STATE:1627471577,CONNECTED,SUCCESS,10.8.0.2,164.52.216.107,1194,, 2021-07-28 16:57:22 SIGTERM received, sending exit notification to peer 2021-07-28 16:57:23 C:\WINDOWS\system32\route.exe DELETE 164.52.216.107 MASK 255.255.255.255 192.168.29.1 2021-07-28 16:57:23 Route deletion via service succeeded 2021-07-28 16:57:23 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.1 2021-07-28 16:57:23 Route deletion via service succeeded 2021-07-28 16:57:23 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.1 2021-07-28 16:57:23 Route deletion via service succeeded 2021-07-28 16:57:23 Closing TUN/TAP interface 2021-07-28 16:57:23 TAP: DHCP address released 2021-07-28 16:57:23 Unblocking outside dns using service succeeded. 2021-07-28 16:57:23 SIGTERM[soft,exit-with-notification] received, process exiting 2021-07-28 16:57:23 MANAGEMENT: >STATE:1627471643,EXITING,exit-with-notification,,,,, Hope this will help

[quote=kashyap009 post_id=101076 time=1627470092 user_id=54256] i have installed openvpn in centos 7.5 using github script [/quote]What script ?

https://raw.githubusercontent.com/Angristan/openvpn-install/master/openvpn-install.sh

Let tracert route first to see when client stop . open cmd on windows and type [code]tracert 8.8.4.4[/code] if stop at 10.8.0.1 it mean something at server stop it . maybe firewall or nat not work correct.

Tracing route to 8.8.4.4 over a maximum of 30 hops 1 22 ms 23 ms 22 ms 10.8.0.1 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * yes you are right tracert stops at 10.8.0.1

I suggest you run the script again, only, do it correctly this time. You may need to verify that the script supports your distro ..

i verified the script i used support centos 7 as well. any how the above tracert which stops at 10.8.0.1 what i needs to check for the same. below is the firewall reule i added in openvpn server. kindly check anything else is neds to add. firewall-cmd --zone=public --add-port=1194/udp firewall-cmd --zone=trusted --add-source=10.8.0.0/24 firewall-cmd --permanent --zone=public --add-port=1194/udp firewall-cmd --permanent --zone=trusted --add-source=10.8.0.0/24 firewall-cmd --direct --add-rule ipv4 nat POSTROUTING 0 -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to 172.16.112.85 firewall-cmd --permanent --direct --add-rule ipv4 nat POSTROUTING 0 -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to 172.16.112.85

[quote=300000 post_id=101088 time=1627477014 user_id=19319] Let tracert route first to see when client stop . open cmd on windows and type [code]tracert 8.8.4.4[/code] if stop at 10.8.0.1 it mean something at server stop it . maybe firewall or nat not work correct. [/quote] could you pls help with the same....what exactly needs to be check for the same Thanks.

You need to report the problem to the script author, angristan.

lost local internet connectivity once connected to openvpn

kashyap009

could you be more elobraete from where to read this Howto to learn what they do.

thanks...

kashyap009

so now somehow i am able to retain my local internet after connecting to my openvpn but issue is all traffic including my local internet traffic as well going through vpn which i dont want.

then i added route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway in my .ovpn file

now my local public didnt chnage but i am unable to reach my openvpn server now

i think i am very much close to the result but somewhere i need to change something

TinCanTech

If you don't do what you were instructed to do then expect things to go wrong .....

I suggest you read the openvpn howto.

300000

here is what you should add into your client so it can use internet when connect to openvpn server.

route  0.0.0.0 192.0.0.0 net_gateway 
route  64.0.0.0 192.0.0.0 net_gateway 
route  128.0.0.0 192.0.0.0 net_gateway 
route  192.0.0.0 192.0.0.0 net_gateway 
dhcp-option DNS 8.8.4.4

when connect to openvpn can you post all routing table of client so let track down when it go. on windows just open cmd and type route print so you will get all routing on windows.

you install openvpn from script so we dont know what they add or remove from system. it is very hard to tell how to repair it

kashyap009

Hi thanks for all your support i am able to access my open vpn server and without chnaging my local public ip.

Servers are accessible from only openvpn asign ip's e.g 10.8.0.3,4

My only concern is now as soon as i install openvpn client on any of my server i am not able to access that server public ip which is important to access application running on that server publically.

thanks in advance.

300000

Now it is more interesting when you finished something and want something more. this topic will help you understand and can guild you create your way to deal with that .

https://forums.openvpn.net/viewtopic.php?f=6&t=7175

kashyap009

300000 wrote Now it is more interesting when you finished something and want something more. this topic will help you understand and can guild you create your way to deal with that .

https://forums.openvpn.net/viewtopic.php?f=6&t=7175

tqs

« Previous Page