sulcatapardalis
Hi,
I have just installed OpenVPN on a CentOS 5 server. This isn't the gateway for the internal network, so I have configured routing on the main gateway to point all 172.16. traffic back to the VPN server.
The server config is as follows;
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
script-security 2
server 172.16.0.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option WINS 192.168.47.107"
push "route 192.168.47.0 255.255.255.0"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client
My intention is to be able to provide the VPN to a select few employees so they can connect to their dekstops usining RDP and a few network shares.
I can connect to the VPN without problem. I can also ping the internal IP address of the VPN server.
If I turn off the local firewall on a Windows 7 desktop, I can also ping that from a client connected via the VPN. That's a Windows issue I need to resolve (any suggestions?).
However, my real stumbling block is I cannot conenct to any network shares - for example \\192.168.47.xxx\myshare over the VPN.
As far as I can see, my routing is correct.
Any suggestions would be most welcome.
Thanks
Stuart
janjust
about the ping messages: as long as the pings are coming from a 'trusted' address then Windows should respond; I'm not exactly sure how this work in Windows, but it IS possible to ping a Win7 machine as long as you are part of either the HOME or WORK networks.
about routing: are you certain that you can reach the IPs of the shares? what does a ping 192.168.47.xx return? what does a 'telnet 192.168.47.xx 445' return (the latter should not return much but at least it should connect).
sulcatapardalis
Hi,
Think I have sorted the Win7 firewall problem (not really used it before, so with a bit of Googleing I have added an exception for ping from any network).
Yes, I am 100% certain the routing is correct (well 99.9%);
PING 192.168.47.44 (192.168.47.44) 56(84) bytes of data.
64 bytes from 192.168.47.44: icmp_seq=1 ttl=128 time=0.232 ms
64 bytes from 192.168.47.44: icmp_seq=2 ttl=128 time=0.211 ms
64 bytes from 192.168.47.44: icmp_seq=3 ttl=128 time=0.263 ms
64 bytes from 192.168.47.44: icmp_seq=4 ttl=128 time=0.262 ms
64 bytes from 192.168.47.44: icmp_seq=5 ttl=128 time=0.207 ms
64 bytes from 192.168.47.44: icmp_seq=6 ttl=128 time=0.361 ms
--- 192.168.47.44 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5000ms
rtt min/avg/max/mdev = 0.207/0.256/0.361/0.051 ms
ping 192.168.47.44 445
PING 445 (0.0.1.189) 56(124) bytes of data.
sulcatapardalis
Doh!
I meant to say;
telnet 192.168.47.44 445
Trying 192.168.47.44...
Connected to 192.168.47.44 (192.168.47.44).
Escape character is '^]'.
BTW, .47.44 is a Windows 7 PC
sulcatapardalis
Hi - I have resolved the problem. I stupidly forgot to open ports 137, 138, 139 and 445 on the VPN server.
janjust
excellent - the 'telnet' output suggested as much. Closing topic.
