Installation configuration help

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
oldandtired
OpenVpn Newbie
Posts: 2
Joined: Wed Oct 24, 2018 11:45 pm

Installation configuration help

Post by oldandtired » Thu Oct 25, 2018 8:09 pm

Using new install of OpenVPN server on windows 10 pro; the service starts and I am able to connect to the service via the GUI on the server. As soon as I connect the server looses connectivity to the local lan. If I exit the GUI the local lan connectivity is regained. The clients can connect to the server while the GUI is connected but obviously they can't get to the local lan as there is no longer connectivity from the OpenVPN server to the local lan.

I strongly suspect that this is a simple routing configuration problem but I don't see it. I have wasted too much time trying to figure out something that I suspect will be obvious to one of you guys. Thanks for your help!

Some details:
Regedit IPEnableRouter = 1

Router 10.0.3.1/255.255.0.0
Advanced routing Route: name OpenVPN Destination 10.0.8.0 mask 255.255.0.0 gateway 10.0.3.2 Interface Lan

Network config
[oconf]
open VPN:
10.0.8.0 255.255.0.0
openVPN server local network:
10.0.3.0 255.255.0.0
ovpn lan gateway:
10.0.3.0
openVPN server:
10.0.3.2

ovpn server network connections:
Ethernet 2 (Linksys USB3GIGV1) Tcip V4 properties 10.0.3.2 mask 255.255.0.0 gateway 10.0.3.1 Saring with Tap
Ethernet 3 (Realtek PCIe FE Family) DHCP
WiFi (Intel(r) Dual Band wireless) DHCP
TAP (TAP-Windows Adapter V9 #2) DHCP
Ethernet (TAP-Windows Adapter) DHCP
[/oconf]

Server.opvn
server

port 1194
proto tcp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
server 10.0.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
route 10.0.3.0 255.255.255.0
push "route 10.0.3.0 255.255.255.0"
client-to-client
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 0


Client config
client

client gregsphone
dev tun
proto tcp
remote *** 1194
resolv-retry infinite
nobind
comp-lzo
persist-key
persist-tun
remote-cert-tls server
key-direction 1
cipher AES-256-CBC
verb 3
float
push "route 10.0.3.0 255.255.255.0 10.0.3.2"


Network config
[oconf]
open VPN:
10.0.8.0 255.255.0.0
openVPN server network:
10.0.3.0 255.255.0.0
ovpn lan gateway:
10.0.3.0
openVPN server:
10.0.3.2

ovpn server network connections:
Ethernet 2 (Linksys USB3GIGV1) Tcip V4 properties 10.0.3.2 mask 255.255.0.0 gateway 10.0.3.1 Saring with Tap
Ethernet 3 (Realtek PCIe FE Family) DHCP
WiFi (Intel(r) Dual Band wireless) DHCP
TAP (TAP-Windows Adapter V9 #2) DHCP
Ethernet (TAP-Windows Adapter) DHCP
[/oconf]

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Installation configuration help

Post by TinCanTech » Thu Oct 25, 2018 8:38 pm

Try disabling these lines by commenting them out:
  • Server config:
    oldandtired wrote:
    Thu Oct 25, 2018 8:09 pm

    Code: Select all

    push "redirect-gateway def1 bypass-dhcp"
    route 10.0.3.0 255.255.255.0
    push "route 10.0.3.0 255.255.255.0"
    client-to-client
    push "dhcp-option DNS 8.8.8.8"
    push "dhcp-option DNS 8.8.4.4"
    Just test without these.
  • Client config:
    oldandtired wrote:
    Thu Oct 25, 2018 8:09 pm

    Code: Select all

    push "route 10.0.3.0 255.255.255.0 10.0.3.2"
    Clients cannot push directives.
You may also find --topology helps (See the manual)

oldandtired
OpenVpn Newbie
Posts: 2
Joined: Wed Oct 24, 2018 11:45 pm

Re: Installation configuration help

Post by oldandtired » Thu Oct 25, 2018 10:44 pm

That helps now the server can reach the local network but the clients can not ping even the openvpn server: 10.0.3.2 they can ping 10.0.8.1

Post Reply