Acsess VMware client on host computer

mkysoft

I have a server running Windows 2008 R2. And I am running Windows 2003 in VMware on it. I installed OpenVPN on Windows 2008. I can connect with TUN and acsess server. I want to acsess VMware guest (Windows 2003) system over VPN network. Problem is:
VMware cannot use bridged network as adapter. Also VMware visual network adapter cannor bridged with TAP device, because VMware block this operatation (give this info http://vmware.com/info?id=68).

I don't want to install in guest (2003) because of performance.

Is there another option?

Thanks.

Mimiko

If form Win2008 server you can ping the VMware host and use network services, just configure routing on Win2008 as if VMware host is another computer on lan.

janjust

Mimiko is right.

I actually use a similar setup myself: my laptop runs Linux, vmware player and openvpn; I run Windows XP as a VM. When my openvpn is set up I can connect remotely to the Windows XP VM using either windows file sharing or using RDP .

It's just a matter of routing :geek:

mkysoft

I can't route on win2008. My configuration like this:

I am using tun connection.

Win2008 (Host)
-----------------
TAP adapter: 10.5.0.0/255.255.255.0
Wnet8 adapter (NAT-share host ip adress with host): 192.168.40.1 (DHCP enabled 192.168.40.128 to 255)
routes:
10.5.0.0 255.255.255.0 to 10.5.0.1
192.168.40.0 255.255.255.0 to 192.168.40.1

Win2003 (guest)
----------------
Wnet8 adapter: 192.168.40.137

XP (VPN Client)
----------------------
TAP adapter: 10.5.0.6
routes:
10.5.0.0 255.255.255.0 to 10.5.0.6

I can ping win2003 (192.168.40.137) on win2008.
I can ping 10.5.0.1 and 192.168.40.1 on XP but I can't ping 192.168.40.137

Any advice?
Thanks.

Mimiko

Just add to OpenVPN server config file (on WIn 2008) the following:

push "route 192.168.40.0 255.255.255.0"

janjust

Just add to OpenVPN server config file (on WIn 2008) the following:
Code:
push "route 192.168.40.0 255.255.255.0"

plus, inside the Windows VM, add a route

route 10.5.0.0 mask 255.255.255.0 192.168.40.1

if required (in most cases the 192.168.40.1 host is already the default GW)

mkysoft

I added all. I can't ping 192.168.40.137. I tracert 192.168.40.137 on XP and log like this:

1 775 ms 510 ms 273 ms 10.5.0.1
2 * * * time out.
3 * * * time out.
4 * * * time out.

I think packet cannot pass win2008 to win2003(vm).

And sorry again 192.168.40.1 was another device on XP network. I mistake before.

janjust

make sure IP forwarding is enabled on the Win2008 box; normally this is done by setting a registry key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter:DWORD = 1

and rebooting. Alternatively you can also try this NETSH command

netsh interface ipv4 set int "[name of the NIC]" forwarding=enabled

mkysoft

I add win2008 and win2003 ip routing, but not ping anyway. I change some ips and try again. I give configuration and route tables here:

-------------------------------------------------------------------------------
Win2008 (Host)
-------------------------------------------------------------------------------
TAP-Win92 V9 adapter: 10.5.0.1/255.255.255.252
Wnet8 adapter (NAT-share host ip adress with host): 192.168.30.1/255.255.255.0 GW none (DHCP enabled and it gives IP at range 192.168.40.128 to 254)
:config file:
port 1194
proto tcp
dev tun
dev-node VPN
server 10.5.0.0 255.255.255.0
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
push "route 10.5.0.0 255.255.255.0"
push "route 192.168.30.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
verb 3
client-to-client
route-method exe
route-delay 2

:route table:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
192.168.30.0 255.255.255.0 On-link 192.168.30.1 276
192.168.30.1 255.255.255.255 On-link 192.168.30.1 276
192.168.30.255 255.255.255.255 On-link 192.168.30.1 276
10.5.0.0 255.255.255.0 10.5.0.2 10.5.0.1 31
10.5.0.0 255.255.255.252 On-link 10.5.0.1 286
10.5.0.1 255.255.255.255 On-link 10.5.0.1 286
10.5.0.3 255.255.255.255 On-link 10.5.0.1 286
===========================================================================

---------------------------------------
Win2003 in VM (guest)
---------------------------------------
Wnet8 adapter: 192.168.30.128/255.255.255.0 GW 192.138.30.2
:manuely add route:
route add 10.5.0.0 mask 255.255.255.0 192.168.30.128

===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
192.168.30.0 255.255.255.0 192.168.30.128 192.168.30.128 10
192.168.30.128 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.30.255 255.255.255.255 192.168.30.128 192.168.30.128 10
10.5.0.0 255.255.255.0 192.168.30.128 192.168.30.128 1
Default Gateway: 192.168.30.2
===========================================================================

-------------------------------
XP (VPN Client)
-------------------------------
TAP adapter: 10.5.0.6/255.255.255.252 GW none
:config file:
client
dev tun
dev-node VPN
proto tcp
remote mkybap 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3

===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.21 10
10.5.0.0 255.255.255.0 10.5.0.5 10.5.0.6 1
10.5.0.4 255.255.255.252 10.5.0.6 10.5.0.6 30
10.5.0.6 255.255.255.255 127.0.0.1 127.0.0.1 30
10.255.255.255 255.255.255.255 10.5.0.6 10.5.0.6 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.2.0 255.255.255.0 192.168.2.21 192.168.2.21 10
192.168.2.21 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.2.255 255.255.255.255 192.168.2.21 192.168.2.21 10
192.168.30.0 255.255.255.0 10.5.0.5 10.5.0.6 1
224.0.0.0 240.0.0.0 10.5.0.6 10.5.0.6 30
224.0.0.0 240.0.0.0 192.168.2.21 192.168.2.21 10
255.255.255.255 255.255.255.255 10.5.0.6 10.5.0.6 1
255.255.255.255 255.255.255.255 192.168.2.21 192.168.2.21 1
Default
Gateway: 192.168.2.1
===========================================================================

I can ping 10.5.0.1 and 192.168.30.1 on XP (Client)
I can ping 10.5.0.6, 192.168.30.1, 192.168.30.128 on win2008 (Host)

Thanks.

mkysoft

I found my own mistake:

On win2003 (guest) I changed route to
route add 10.5.0.0 mask 255.255.255.0 192.168.30.1

Thanks for yours help janjust and Mimiko.