Need help configuring your VPN? Just post here and you'll get that help.
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
djstoneage
- OpenVpn Newbie
- Posts: 5
- Joined: Fri Aug 12, 2011 4:28 am
Post
by djstoneage » Fri Aug 12, 2011 4:35 am
Hi all
I am having trouble with my openvpn network configuration. All my windows 7 machine on the network is having problem browsing files from the local server. ping is over 200ms, however all the windows xp machine on the network has got no problem accessing the local file server ping is under 20ms
Openvpn server is linux.
When i stop openvpn everything works fine. windows 7 machine is able to access local file server normally. but without openvpn i am unable to access my fileserver in the main office in london. I am in malaysia
My current configuration
Modem > Firewall server -> switch ->computers
->Openvpn server
Code: Select all
client
dev tap
proto udp
remote vpn1.bmtfm.com 1194
remote vpn2.bmtfm.com 1194
remote vpn3.bmtfm.com 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
pkcs12 certs/klvpn.p12
askpass certs/cert-pass
ns-cert-type server
auth-user-pass certs/user-pass
comp-lzo
verb 3
Any help is appreciated
-
Mimiko
- Forum Team
- Posts: 1564
- Joined: Wed Sep 22, 2010 3:18 am
Post
by Mimiko » Fri Aug 12, 2011 5:41 am
When i stop openvpn everything works fine. windows 7 machine is able to access local file server normally. but without openvpn i am unable to access my fileserver in the main office in london.
How you can access fileserver normally without VPN if you are not in London?
Describe the infrstructure more detailed, where and what is placed.
-
djstoneage
- OpenVpn Newbie
- Posts: 5
- Joined: Fri Aug 12, 2011 4:28 am
Post
by djstoneage » Fri Aug 12, 2011 7:01 am
Mimiko thanks for responding
Here's the infrastructure
I am currently located in Malaysia and we have another office in London.
Our previous setup where we have individual client for each computer. User will have to log in everytime they want to access london file server.
The setup was Modem > Router > Switch > user pc
The new setup
Modem > Firewall server > Switch > user pc
> local filer server
with the new setup user pc do not have to individually sign on to VPN, the problem with this is all windows 7 machine sees the local file server as though it is in london. it is very slow to access any files on the local server. But it is perfectly fine on windows xp machines.
If i disable openvpn i am unable to access the file server in london, but my connection to my local server on windows 7 becomes normal. As soon as i enable it again it will be slow again.
Does that clear your doubt?
-
Mimiko
- Forum Team
- Posts: 1564
- Joined: Wed Sep 22, 2010 3:18 am
Post
by Mimiko » Fri Aug 12, 2011 8:32 am
Not really. Could you draw a sketch and attach here?
Show server's config. Routing tables. Logs.
-
janjust
- Forum Team
- Posts: 2703
- Joined: Fri Aug 20, 2010 2:57 pm
- Location: Amsterdam
-
Contact:
Post
by janjust » Fri Aug 12, 2011 8:56 am
sounds like a routing/bridging issue - without seeing your server config file it will be impossible to tell.
what kind of host is acting as the openvpn client for your network in malaysia? and what kind of host is acting as openvpn server?
-
djstoneage
- OpenVpn Newbie
- Posts: 5
- Joined: Fri Aug 12, 2011 4:28 am
Post
by djstoneage » Mon Aug 15, 2011 7:03 am
This is the route table
Code: Select all
===========================================================================
Interface List
13...bc 30 5b cf a1 63 ......Broadcom NetXtreme 57xx Gigabit Controller
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
11...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.143.169.254 10.143.169.108 266
10.143.160.0 255.255.240.0 On-link 10.143.169.108 266
10.143.169.108 255.255.255.255 On-link 10.143.169.108 266
10.143.175.255 255.255.255.255 On-link 10.143.169.108 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.143.169.108 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.143.169.108 266
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
12 58 ::/0 On-link
1 306 ::1/128 On-link
12 58 2001::/32 On-link
12 306 2001:0:4137:9e76:203a:97d5:5074:6fa6/128
On-link
12 306 fe80::/64 On-link
12 306 fe80::203a:97d5:5074:6fa6/128
On-link
1 306 ff00::/8 On-link
12 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
This is the network configuration
http://gallery.me.com/djstoneage#100059/Network
-
Mimiko
- Forum Team
- Posts: 1564
- Joined: Wed Sep 22, 2010 3:18 am
Post
by Mimiko » Mon Aug 15, 2011 6:26 pm
From diagram, where the file server is located? On same computer where is OpenVPN server?
Could you show OpenVPN server config file? Does you use bridging mode?
Does you network switch have any filtering capabilities?
-
djstoneage
- OpenVpn Newbie
- Posts: 5
- Joined: Fri Aug 12, 2011 4:28 am
Post
by djstoneage » Tue Aug 16, 2011 7:40 am
The file server is where the User PC in blue is. the server openvpn conf file is above right?
-
Mimiko
- Forum Team
- Posts: 1564
- Joined: Wed Sep 22, 2010 3:18 am
Post
by Mimiko » Tue Aug 16, 2011 7:52 am
That coinfig file is for OpenVPN client.
Does the network switch have filter capabilities?
-
djstoneage
- OpenVpn Newbie
- Posts: 5
- Joined: Fri Aug 12, 2011 4:28 am
Post
by djstoneage » Wed Aug 17, 2011 3:40 am
I am not sure if the network switch has a filtering capability. But just to make it clear, inidividual machine's do not use a VPN client the entire network is.
-
Mimiko
- Forum Team
- Posts: 1564
- Joined: Wed Sep 22, 2010 3:18 am
Post
by Mimiko » Wed Aug 17, 2011 5:01 am
Will you show config file from OpenVPN server?
Try using on OpenVPN client some traffic sniffer to see, what packets are flooding the network. Normally OpenVPN client on some computer in network does not slow down file server access of other computers to another computer in network, especialy differentiate between Windows XP and Windows 7.