Windows 7 OpenVPN client connection issue

[jy.zhang]

Hi there,

My current setup -
OpenVPN server: Windows 2003 server
Client: Windows XP and Windows 7

XP works fine - server can ping XP tunnel IP and local IP and the other way.
But I am having trouble with Windows 7: Server can only ping the tunnel IP but not the local IP. Windows 7 and XP have the same client configuration. I turned off Windows 7 firewall, no joy.


Any idea?

Thanks.

[george]

Can you post your client config?

[jy.zhang]

Please see the client and server configuration file. On client side, same settings on xp computer without any problem.

Client Config:

dev tap
remote OpenvpnServer1190
ip-win32 netsh
dev-node OpenVPN
client
nobind
ifconfig 172.16.0.2 255.255.255.0
route-gateway 172.16.0.1
pull
route 192.168.17.0 255.255.255.0
persist-key
persist-tun

keepalive 10 60
ca ca.crt
cert client.crt
key client.key
tls-client
comp-lzo
verb 5
mute 20

Server Config:

verb 5
dev tap
ip-win32 netsh
dev-node CorpVPN
port 1190
ifconfig 172.16.0.1 255.255.255.0
mode server
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem

tls-server
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
push "route 192.168.17.0 255.255.255.0"
route 10.100.100.0 255.255.255.0 172.16.0.2

[george]

add the following to the Windows 7 client file:

Code: Select all

route-method exe 
route-delay 2

[jy.zhang]

add the following to the Windows 7 client file:

Code: Select all

route-method exe 
route-delay 2

Hi George,

Thanks for posting your method, but it is not working as well.

I think it's not an routing issue. Without those two lines, the tunnel is up, the routing table is correct, I can ping the Openvpn server and the server side network. But from the server, I can only ping the tunnel ip but not the W7 local IP. The openvpn profile is automatically set to public network which I believe the cause of the issue.

[kokonech]

I have exactly the same problem!

Once I changed my home system from XP to 7, my openvpn setup stopped working. The client is connected to server, traffic routing works but I can not access any web-site from browser (server is used as a gateway to access Internet).

I suppose this issue is connected to DNS somehow, because I can access external server network by IP.

Does anyone has the solution?

[janjust]

can you try making the tap-win32 adapter part of a work or home network? does that help?
is IPv6 enabled? is local discovery enabled or disabled?