OpenVPN is connected but does not work

Solar

Hello,

I just setup a VPN server on a PC under Windwos 7 64 bit and configure the client on a Windows 7 32-bit.
(I can move me and I connect to other terminals as it was at home with the PC client)

I connect with openvpn server, it works
I connect the client with openvpn, it works
I test with ping, however, if the machines are connected (Ping OK)
By cons, when I surf the internet with the PC client, I surf with an Internet connection and not with the external connection to my openvpn server, yet there is traffic entering and leaving my pc server
I think it must come from the road but after several configurations, the conclusion is always the same, the PC client does not take into account the connection of PC server !
I configured the whole mode TUN or TAP mode that gives even designed !

How do I do?

Bebop

server.conf + client.conf if posted here will get you quicker / more meaningful replies.

If you can still surf the net from the client, but not with the server IP, then it usually indicates a problem such as you didn't add to your server.conf:

push "redirect-gateway def1"

Add that to server.conf and restart the openvpn server instance.

Solar

Here are the details of the files:
server.ovpn:

local 192.168.0.2
port 443
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;keepalive 10 120
tls-auth ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
cipher AES-256-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 4
mute 20

client.ovpn:

client
dev tun
proto tcp
remote 79.123.12.xxx 443
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 4
mute 20

After adding the line:
push "redirect-gateway def1"
the server and client connect but the client does not have internet access

the detailed router :

janjust

does the openvpn server have routing enabled? is there some form of masquerading/natting on the server side? you'll need both to get 'redirect-gateway def1' to work properly.

Bebop

Bebop wroteAfter adding the line:push "redirect-gateway def1"the server and client connect but the client does not have internet access

Perfect. That means you are making progress. As you can see, your client is not bypassing the VPN now. Instead all of the traffic from your client is being sent to the VPN. So I can hear your say: Then what is the problem?

The problem remains that your VPN server now has to forward the traffic from your client, to the Internet -- also known as tunneling.

On a Linux OpenVPN server I can tell you how to fix that problem with IPTABLES. But you are on a Windows OpenVPN server, so your best option now is to wait for a Windows openVPN expert to help -- or alternatively, try to figure it out with Google / search (because unfortunately for you, I don't know who to help you more with the Windows server).

[Edit]

hey janjust, we have to stop meeting like this :] your post always ahead of mine by a minute or two (three in this case).

janjust wroteis there some form of masquerading/natting on the server side?

In a nutshell, how is this usually done on Windows 7 / XP etc?

I know in Linux, IPTABLES is an easy option.. but I've not investigated the Windows way.

Solar

I just tried Linux ubunutu 10.10 and it does the same thing, I think it does not come from iptables, because I use other vpn fee and I login as a client without problem on linux.

[deleted]

Solar wroteI just tried Linux ubunutu 10.10 and it does the same thing, I think it does not come from iptables, because I use other vpn fee and I login as a client without problem on linux.

If you are using def1 and the server is Linux, you need a masquerading rule and IP forwarding enabled.

Check the howto.

shadww

Hi,

I am facing a similar situation here, but I have my server on a linux machine.

I would like to have an example of forwarding the traffic by using iptables on linux is possible.

regards,
shadww

Mimiko

shadww wroteI would like to have an example of forwarding the traffic by using iptables on linux is possible

Read the howto: http://openvpn.net/index.php/open-source/documentation/howto.html#redirect