quentinr Environment: OpenVPN version: openvpn-install-2.4.9-I601-Win10 OpenVPN host: Windows 10 Professional x64 OpenVPN subnet: 10.8.0.0/24 LAN subnet: 10.0.100.0/24 (gateway 10.0.100.1) LAN router: FortiGate 51E 10.0.100.1 OpenVPN server IP: 10.0.100.10 (LAN) / 10.8.0.1 (OpenVPN) Goal: I want to be able to connect OpenVPN clients from the WAN to my internal OpenVPN server in tunnel mode and I also want to route all traffic from those clients through the OpenVPN server, through the LAN, to the internet. I would also like to be able to connect to devices on the LAN from the OpenVPN tunnel, however I will need to use tun mode instead of tap as tap isn't supported on iOS and Android. Issue: I have setup OpenVPN in tunnel mode on a Windows 10 machine using UDP and port 1194. I have setup a virtual IP address (port forwarding) on the LAN firewall (FortiGate) and setup IPv4 policies to allow the incoming traffic (with NAT). I am able to connect to the OpenVPN server via WAN no problem, but traffic is not being routed beyond the OpenVPN server. I cannot ping 10.8.0.1 or 10.0.100.1 from clients connected to the OpenVPN server. On the LAN firewall I have a static route in place for Destination: 10.8.0.0/24, Gateway: 10.0.100.10 On the Windows 10 OpenVPN server the firewall is completely off. Below is the server.ovpn configuration: port 1194 proto udp dev tun ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" cert "C:\\Program Files\\OpenVPN\\config\\server.crt" key "C:\\Program Files\\OpenVPN\\config\\server.key" dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem" server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" push "route 10.0.100.0 255.255.255.0" client-to-client keepalive 10 120 tls-auth ta.key 0 cipher AES-256-CBC max-clients 100 persist-key persist-tun status openvpn-status.log log-append openvpn.log verb 5 explicit-exit-notify 1 Not sure where I am messing up my configuration. I have made a bunch of different changes to the push configurations for DNS, routes, and gateways to no avail. Thanks in advance to anyone willing to spend some time to read my post!
TinCanTech quentinr wrote I cannot ping 10.8.0.1 Firewall or errors shown in your log files. https://forums.openvpn.net/viewtopic.php?f=30&t=22603
quentinr I resolved the issue afterwards, I needed to enable IP routing in the Windows registry. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters Set IPEnableRouter to 1 and restart the system.
