- which OS is the openvpn server running on
It is the packaged VM appliance by OpenVPN which runs on top of Ubuntu.
- what is the server config file
Looks like it was stored in sqlite... dump file follows:
INSERT INTO "config" VALUES(1,'vpn.daemon.0.client.netmask_bits','24');
INSERT INTO "config" VALUES(1,'vpn.server.port_share.ip_address','1.2.3.4');
INSERT INTO "config" VALUES(1,'vpn.daemon.0.listen.port','443');
INSERT INTO "config" VALUES(1,'auth.ldap.0.name','My LDAP servers');
INSERT INTO "config" VALUES(1,'cs.https.ip_address','all');
INSERT INTO "config" VALUES(1,'vpn.server.daemon.enable','true');
INSERT INTO "config" VALUES(1,'vpn.server.daemon.tcp.n_daemons','1');
INSERT INTO "config" VALUES(1,'vpn.daemon.0.listen.ip_address','eth0');
INSERT INTO "config" VALUES(1,'auth.ldap.0.timeout','4');
INSERT INTO "config" VALUES(1,'vpn.server.daemon.tcp.port','443');
INSERT INTO "config" VALUES(1,'vpn.server.port_share.port','1234');
INSERT INTO "config" VALUES(1,'vpn.tls_refresh.interval','360');
INSERT INTO "config" VALUES(1,'vpn.daemon.0.server.ip_address','all');
INSERT INTO "config" VALUES(1,'vpn.server.routing.private_access','nat');
INSERT INTO "config" VALUES(1,'vpn.daemon.0.client.network','192.168.255.0');
INSERT INTO "config" VALUES(1,'auth.pam.0.service','openvpnas');
INSERT INTO "config" VALUES(1,'auth.ldap.0.use_ssl','never');
INSERT INTO "config" VALUES(1,'vpn.server.routing.private_network.0','192.168.1.
0/24');
INSERT INTO "config" VALUES(1,'vpn.server.daemon.udp.n_daemons','1');
INSERT INTO "config" VALUES(1,'sa.initial_run_groups.0','web_group');
INSERT INTO "config" VALUES(1,'sa.initial_run_groups.1','openvpn_group');
INSERT INTO "config" VALUES(1,'host.name','204.15.3.206');
INSERT INTO "config" VALUES(1,'auth.radius.0.acct_enable','false');
INSERT INTO "config" VALUES(1,'vpn.tls_refresh.do_reauth','true');
INSERT INTO "config" VALUES(1,'vpn.server.daemon.udp.port','1194');
INSERT INTO "config" VALUES(1,'vpn.server.port_share.service','admin+client');
INSERT INTO "config" VALUES(1,'admin_ui.https.port','943');
INSERT INTO "config" VALUES(1,'cs.https.port','943');
INSERT INTO "config" VALUES(1,'admin_ui.https.ip_address','all');
INSERT INTO "config" VALUES(1,'vpn.client.routing.reroute_gw','false');
INSERT INTO "config" VALUES(1,'auth.module.type','local');
INSERT INTO "config" VALUES(1,'vpn.daemon.0.listen.protocol','tcp');
INSERT INTO "config" VALUES(1,'auth.ldap.0.ssl_verify','never');
INSERT INTO "config" VALUES(1,'auth.radius.0.name','My Radius servers');
INSERT INTO "config" VALUES(1,'vpn.server.port_share.enable','true');
INSERT INTO "config" VALUES(1,'vpn.client.routing.inter_client','true');
INSERT INTO "config" VALUES(2,'run_api.active_profile','Default');
INSERT INTO "config" VALUES(2,'webui.edit_profile','Default');
INSERT INTO "config" VALUES(2,'webui.welcome_shown','true');
INSERT INTO "config" VALUES(1,'aui.eula_version','1');
INSERT INTO "config" VALUES(1,'vpn.client.routing.reroute_dns','custom');
INSERT INTO "config" VALUES(1,'vpn.server.routing.gateway_access','true');
INSERT INTO "config" VALUES(1,'vpn.general.osi_layer','3');
INSERT INTO "config" VALUES(1,'cs.ssl_method','SSLv23');
INSERT INTO "config" VALUES(1,'vpn.client.config_text','');
INSERT INTO "config" VALUES(1,'vpn.server.routing.routed_subnets.0','192.168.1.0
/24');
INSERT INTO "config" VALUES(1,'vpn.server.duplicate_cn','true');
INSERT INTO "config" VALUES(1,'vpn.server.config_text','');
INSERT INTO "config" VALUES(1,'vpn.server.foreign_bridge','eth0');
INSERT INTO "config" VALUES(1,'vpn.server.routing.routed_subnets.1','192.168.255
.0/24');
INSERT INTO "config" VALUES(1,'cs.admin_only','false');
INSERT INTO "config" VALUES(1,'xmlrpc.relay_level','2');
INSERT INTO "config" VALUES(1,'vpn.server.dhcp_option.dns.1','204.15.0.22');
- what is the client config file (for both Linux and Windows)
# Automatically generated OpenVPN client config file
# Generated on Sun Feb 5 22:58:43 2012 by localhost.localdom
# Note: this config file contains inline private keys
# and therefore should be kept confidential!
# Note: this configuration is user-locked to the username below
# OVPN_ACCESS_SERVER_USERNAME=bill
# Define the profile name of this particular configuration file
# OVPN_ACCESS_SERVER_PROFILE=
william@xxx.xx.xx.xxx/AUTOLOGIN
# OVPN_ACCESS_SERVER_AUTOLOGIN=1
# OVPN_ACCESS_SERVER_CLI_PREF_ALLOW_WEB_IMPORT=True
# OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_CONNECT=True
# OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_XD_PROXY=True
# OVPN_ACCESS_SERVER_WSHOST=xxx.xx.xx.xxx:443
# OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_START
# -----BEGIN CERTIFICATE-----
# -----END CERTIFICATE-----
# OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_STOP
# OVPN_ACCESS_SERVER_IS_OPENVPN_WEB_CA=1
# OVPN_ACCESS_SERVER_ORGANIZATION=OpenVPN Technologies, Inc.
setenv FORWARD_COMPATIBLE 1
client
server-poll-timeout 4
nobind
remote xxx.xx.xx.xxx 1194 udp
remote xxx.xx.xx.xxx 1194 udp
remote xxx.xx.xx.xxx 443 tcp
remote xxx.xx.xx.xxx 1194 udp
remote xxx.xx.xx.xxx 1194 udp
remote xxx.xx.xx.xxx 1194 udp
remote xxx.xx.xx.xxx 1194 udp
remote xxx.xx.xx.xxx 1194 udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 604800
sndbuf 100000
rcvbuf 100000
# NOTE: LZO commands are pushed by the Access Server at connect time.
# NOTE: The below line doesn't disable LZO.
comp-lzo no
verb 3
setenv PUSH_PEER_INFO
<ca>
- does anything odd show up in the Win7 client log files?
Testing from the Mac, and nothing strange seems to be there.
I can connect to all LINUX servers with no problem in the network. The windows servers seem to be a problem. I set up a route from each machine (Windows and LINUX) such that all 192.168.255 traffic would route back to 192.168.1.182, which is the openvnas VM appliance.
For example, on LINUX:
[root@gw ~]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 * 255.255.255.0 U 0 0 0 eth1
192.168.255.0 192.168.1.182 255.255.255.0 UG 0 0 0 eth1
link-local * 255.255.0.0 U 1003 0 0 eth1
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth1
On Windows:
192.168.1.0 255.255.255.0 On-link 192.168.1.181 266
192.168.1.181 255.255.255.255 On-link 192.168.1.181 266
192.168.1.255 255.255.255.255 On-link 192.168.1.181 266
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.255.0 255.255.255.0 192.168.1.182 192.168.1.181 11
There doesn't seem to be any issues with the connection itself that I have seen. Do Windows firewalls need to be turned off? Or modified in a certain way?
TIA!
