Windows 7 OpenVPN client connection issue

jy.zhang

Hi there,

My current setup -
OpenVPN server: Windows 2003 server
Client: Windows XP and Windows 7

XP works fine - server can ping XP tunnel IP and local IP and the other way.
But I am having trouble with Windows 7: Server can only ping the tunnel IP but not the local IP. Windows 7 and XP have the same client configuration. I turned off Windows 7 firewall, no joy.

Any idea?

Thanks.

george

Can you post your client config?

jy.zhang

Please see the client and server configuration file. On client side, same settings on xp computer without any problem.

Client Config:

dev tap
remote OpenvpnServer1190
ip-win32 netsh
dev-node OpenVPN
client
nobind
ifconfig 172.16.0.2 255.255.255.0
route-gateway 172.16.0.1
pull
route 192.168.17.0 255.255.255.0
persist-key
persist-tun

keepalive 10 60
ca ca.crt
cert client.crt
key client.key
tls-client
comp-lzo
verb 5
mute 20

Server Config:

verb 5
dev tap
ip-win32 netsh
dev-node CorpVPN
port 1190
ifconfig 172.16.0.1 255.255.255.0
mode server
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem

tls-server
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
push "route 192.168.17.0 255.255.255.0"
route 10.100.100.0 255.255.255.0 172.16.0.2

george

add the following to the Windows 7 client file:

route-method exe 
route-delay 2

jy.zhang

george wroteadd the following to the Windows 7 client file:

route-method exe 
route-delay 2

Hi George,

Thanks for posting your method, but it is not working as well.

I think it's not an routing issue. Without those two lines, the tunnel is up, the routing table is correct, I can ping the Openvpn server and the server side network. But from the server, I can only ping the tunnel ip but not the W7 local IP. The openvpn profile is automatically set to public network which I believe the cause of the issue.

kokonech

I have exactly the same problem!

Once I changed my home system from XP to 7, my openvpn setup stopped working. The client is connected to server, traffic routing works but I can not access any web-site from browser (server is used as a gateway to access Internet).

I suppose this issue is connected to DNS somehow, because I can access external server network by IP.

Does anyone has the solution?

janjust

can you try making the tap-win32 adapter part of a work or home network? does that help?
is IPv6 enabled? is local discovery enabled or disabled?