openvpn.conf -Hi there,
I've been banging my head against the wall for weeks over this. I have a machine running openvpn 2.09 that has been running great and routing traffic from the client to machines on the server network.
I had another machine running 2.1.1 with identical configuration file and firewall settings this one how ever lets me ping the server and its ip address on the internal address but no any other addresses on the internal network. e.g. from the client i can ping 182.168.29.125 (the server) but not any other address. I've tried another machine also running 2.1.1 and it nots having it, I can only think that there has been changes that I am unaware that makes my config file invalid or I've compiled openvpn incorrectly, can someone help?
route -n gives the correct route:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.17.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
80.45.122.65 192.168.1.254 255.255.255.255 UGH 0 0 0 wlan0
192.168.1.0 0.0.0.0 255.255.255.0 U 2 0 0 wlan0
192.168.29.0 172.17.0.5 255.255.255.0 UG 0 0 0 tun0
192.168.28.0 172.17.0.5 255.255.255.0 UG 0 0 0 tun0
172.17.0.0 172.17.0.5 255.255.255.0 UG 0 0 0 tun0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 wlan0
0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 wlan0
Here are my versions:
OpenVPN 2.0.9 i386-redhat-linux [SSL] [LZO] [EPOLL] built on Aug 10 2009
OpenVPN 2.1.1 x86_64-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Jan 26 2010
port 1194 # (1194 is the default but on some APN networks this is blocked)
proto tcp
dev tun
ca /etc/openvpn/certs/keys/ca.crt
cert /etc/openvpn/certs/keys/controltower.crt
key /etc/openvpn/certs/keys/controltower.key # This file should be kept secret
# Diffie hellman parameters.
# Generate your own with:
# openssl dhparam -out dh1024.pem 1024
# Substitute 2048 for 1024 if you are using
# 2048 bit keys.
dh /etc/openvpn/certs/keys/dh1024.pem
server 172.17.0.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
#push "dhcp-option WINS 192.168.1.2"
push "route 192.168.29.0 255.255.255.0"
push "route 192.168.28.0 255.255.255.0"
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 5
duplicate-cn # (this means several users can use the same key)
client-to-client
--------------