Hello everyone! I have set up a working OpenVPN server on OpenBSD 4.9 for over a month now, but now I am facing a problem: Some Windows clients have other OpenVPN's they need to be connected to. I know this can happen by adding a new TAP-Win32 Adapter to the windows machines... but the problem is, my OpenVPN is configured to give static IP addresses. Thus, one of the adapters should always have a static IP address and the other should be on DHCP. Can you help me find out how to configure OpenVPN's config file on the Windows clients to choose the specific adapter? Because now it chooses the first available from the two. What if I want it to use always the second? Here is the client conf: [code]port 1194 proto udp dev tun ip-win32 manual remote [i]X.X.X.X[/i] ns-cert-type server route-delay 2 tls-client ca "[i]xxxx[/i]. ca.crt" cert "[i]xxxx[/i].crt" key "[i]xxxx[/i].key" tls-auth "[i]xxxx [/i]ta.key" 1 auth-nocache mtu-test tun-mtu 1500 mssfix 1450 pull cipher BF-CBC comp-lzo verb 6[/code] I see in the log that OpenVPN uses some registry 'identity' for each of the adapters... but can I specify this in the config? Or is there another way to do it? I disabled the first adapter and I see this: [code]Thu Dec 22 16:08:29 2011 us=189000 CreateFile failed on TAP device: \\.\Global\{C7286490-C01B-414D-AD99-31BF78C07EC3}.tap Thu Dec 22 16:08:29 2011 us=189000 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{8C7C83A7-B39B-4168-AC6C-30375F1613C2}.tap[/code] Thanks! Simeon

Specifying which TAP-WIN32 to use

zealer

Hello everyone!

I have set up a working OpenVPN server on OpenBSD 4.9 for over a month now, but now I am facing a problem:

Some Windows clients have other OpenVPN's they need to be connected to. I know this can happen by adding a new TAP-Win32 Adapter to the windows machines... but the problem is, my OpenVPN is configured to give static IP addresses. Thus, one of the adapters should always have a static IP address and the other should be on DHCP.

Can you help me find out how to configure OpenVPN's config file on the Windows clients to choose the specific adapter? Because now it chooses the first available from the two. What if I want it to use always the second?

Here is the client conf:

port 1194
proto udp
dev tun
ip-win32 manual
remote [i]X.X.X.X[/i]
ns-cert-type server
route-delay 2
tls-client

ca "[i]xxxx[/i]. ca.crt"
cert "[i]xxxx[/i].crt"
key "[i]xxxx[/i].key"
tls-auth "[i]xxxx [/i]ta.key" 1

auth-nocache
mtu-test
tun-mtu 1500
mssfix 1450
pull
cipher BF-CBC
comp-lzo
verb 6

I see in the log that OpenVPN uses some registry 'identity' for each of the adapters... but can I specify this in the config? Or is there another way to do it?

I disabled the first adapter and I see this:

Thu Dec 22 16:08:29 2011 us=189000 CreateFile failed on TAP device: \\.\Global\{C7286490-C01B-414D-AD99-31BF78C07EC3}.tap
Thu Dec 22 16:08:29 2011 us=189000 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{8C7C83A7-B39B-4168-AC6C-30375F1613C2}.tap

Thanks!
Simeon

janjust

Read the fine manual:

--dev-node node
Explicitly set the device node rather than using /dev/net/tun, /dev/tun, /dev/tap, etc. If OpenVPN cannot figure out whether node is a TUN or TAP device based on the name, you should also specify --dev-type tun or --dev-type tap.

On Windows systems, select the TAP-Win32 adapter which is named node in the Network Connections Control Panel or the raw GUID of the adapter enclosed by braces. The --show-adapters option under Windows can also be used to enumerate all available TAP-Win32 adapters and will show both the network connections control panel name and the GUID for each TAP-Win32 adapter.