Problems with OpenVPN 2.2.2 on Windows Server

pfahrun

Dear OpenVPN Users,

I am trying to set up an OpenVPN network with a Windows Server 2008 RS. Using DynDNS I already established a connection between one client and the server. Nevertheless, I have some troubles with the data transfer between them and some configuration questions. My main problem is that although I ping ping and access the shared folders of my server through the client I cannot access my client through the server - Even pinging is not possible. Additionally I cannot access my server remote with my client PC. Would be great if you could help me and might also consider answering my questions at the bottom of this post.

First some insights regarding the configuration:
Windows Server 2008 RS = OpenVPN Server (Physical IP: 192.168.178.100; Virtual IP: 10.8.0.1)
PC with Windows 7 = OpenVPN Client (Physical IP: 192.168.178.20; Virtual IP: 10.8.0.20)
FritzBox Router / Gateway (Physical IP: 192.168.178.1 | Port Forwarding to Server over Port 444 (TCP))

Server.ovpn

Listining IP
;192.168.178.100
port 444
proto tcp-server
mode server
tls-server
dev tap
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem

# Our Server IP
ifconfig 10.8.0.1 255.255.255.0

# dynamic clients
ifconfig-pool 10.8.0.20 10.8.0.254
ifconfig-pool-persist ipp.txt

push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
comp-lzo
max-clients 100
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 4

Client.ovpn

client
dev tap
proto tcp
remote pfahrun.zapto.org 444
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert cam1.crt
key cam1.key
ns-cert-type server
comp-lzo
verb 3

Routing table server

Routing table client

Log-File Server
http://userpages.uni-koblenz.de/~pfahrun/server.log

Additional issues / questions:
1) I would like to access my server remote - what do I need to do? Its not working through the VPN connection do I need to establish a specific rule for routing from my virtual server port (10.8.0.1) to my physical server port (192.168.178.100).
2) Although I want to use remote access I would like to close all ports except Port 444 for the OpenVPN Gateway and port 80 for the Webserver. I am wondering whether there is a way to allow only conncetions through the Openvpn tunnel to establish a remote connection?
3) In my final network I would like to use a router instead of my notebook as the OpenVPN client. The router will be connected to an IP-cam. Now I was wondering what do I need to do to be able to access the subnet behind the router. Must the router also work as an OpenVPN server? For me it is important to access the router as well as the IP-Cam through the Web-Interface Port 80. So port forwarding is not an option - right? Because all connections are established through the same port (Port 444 for the OpenVPN tunnel)?

I am really looking forward to your insights. It is driving me crazy. Thank you very much in advance.

All the best
Patrick

pfahrun

Wuhu I solved my main issue to establish a conncetion from the server to the client. I just added the following into my server.ovpn:

push "route 10.8.0.0 255.255.255.0 10.8.0.1"
client-to-client

Now I can access shared folders, ping, and use remote access in both directions (server to client and client to server).

Any ideas for issues 2 and 3 at the bottom of my post?

Mimiko

In windows you have to use third party software or hard-to-understant internal firewall to allow only some ports to go thru tunnel.
If you whant a hardware router, you can look for a DD-WRT supporting router. You will have to configure forwarding rules on the router for your needs. And router can act as a OpenVPN server or client.