au8726617
Greetings,
I installed OpenVPN for the first time yesterday, and I am having some problems.
The network layout is the following:
Company LAN (private IPs): 172.27.27.0/255.255.255.0
FW/NAT: LAN IP: 172.27.27.1
Server 1: OpenVPN server (Windows) on LAN IP: 172.27.27.20, and TAP inteface IP: 172.18.173.1 (handing out 172.18.173.1/255.255.255.0 to clients).
Server 2: LAN IP 172.27.27.2
Client (other netowrk, also behind NAT) TAP interface IP: 172.18.173.6.
The client can ping the OpenVPN servers TAP interface IP (172.18.173.1), so the tunnle seems to be working.
I added a routing rule to the firewall to route packets for 172.18.173.0/255.255.255.0 back to the OpenVPN server (172.27.27.20).
Pinging Server 2 from the Client does not work. Running Windump on strategic places I see the following:
Server 1 (OpenVPN server)
On the TAP interface I see the ping request from the Client (172.18.173.6) to Server 2 (172.27.27.2)
On the LAN interface I see the ping request from the Client (172.18.173.6) to Server 2 (172.27.27.2)
Server 2
On the LAN interface (172.27.27.2) I see the ping request from the Client (172.18.173.6) as well ass the ping response back to the client (172.18.173.6).
Server 1 (OpenVPN server)
On the LAN interface I see the ping response from Server 1 (172.27.27.2) to the client (172.18.173.6). This would inidcate that the routing rule on the FW is working.
On the TAP interface I see no ping response.
Client:
The ping response is not received.
So, it seems like no traffic is getting from the internal LAN back to the Client.
What could be the problem here ?
The server running OpenVPN is Windows 2008 R2 64-bit.
More information will ofcourse be provided upon request.
Any help would be appriciated.
Thanks in advance.
Mimiko
On the OpenVPN server disable any firewall and antivirus. Doble check that forward is enabled.
au8726617
Sorry, forgot to mention that firewalls are disabled.
How do I check if forwarding is enabled ?
Thank you.
au8726617
Thank you Mimiko.
Forwarding was indeed disabled. Enabling it on the OpenVPN server and the ping reply was recevied on the client.
For the archives: Enable forwarding form the LAN Connection (named "Local Area Connection" on Windows 2008 R2:
netsh interface ipv4 set int "Local Area Connection" forwarding=enabled
Mimiko
