Page 1 of 1

MacOS: can't ping local network or any another actions

Posted: Tue May 29, 2018 12:57 pm
by EpicCompass
Hi all. Could you, please, help me (I haven't many expirience with OS X, maybe I've lost some simple things)

I've use Tunnelblick client and .ovpn config file for connecting to my VPN-server(VPN Server based on Ubuntu)

Android/Windows/Linux devices works well (successful connection/ping/file sharing/rdp etc.)

But with all OS X based devices (mobile and laptops) I have an issue:
Connection successful (ifconfig-push works and gain pre-setted local IP) but I can't ping any vpn clients.
I'm able to ping only external IP of my vpn-server. Also I can't do anything from OS X based devices in VPN network after connection

Server Config
:
port 1194
proto udp
dev tun
ca ca.crt
sert
server.crt
key server.key
dh dh2048.pem
topology subnet
server 10.90.90.0 255.255.255.0
keepalive 10 120
xls-auth ta.key 0
key-direction 0
cipher AES-128-DC
auth SHA256
max-clients 100
persist-key
persist-tun
status openvpn-status.log
verb 3
client-config-dir ccd
client-to-client


Client Config
:
client
dev tun
proto udp
remote **.**.**.** 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-128-CBC
auth SHA256
key-direction 1
verb 3


In openvpn-status.log on server I able to see connected OS X devices

Re: MacOS: can't ping local network or any another actions

Posted: Tue May 29, 2018 1:51 pm
by ecrist
In your server config, you need to push the VPN subnet route to the VPN clients. So, in addition to the server line you already have, add a line:

Additions

push "route 10.90.90.0 255.255.255.0"

Re: MacOS: can't ping local network or any another actions

Posted: Tue May 29, 2018 2:14 pm
by EpicCompass
Thank you for reply

Done, but still not work

Logs from connection process in Tunnelblick can help?

Re: MacOS: can't ping local network or any another actions

Posted: Tue May 29, 2018 2:16 pm
by TinCanTech
That route is set on the client by the ifconfig statement the client executes..

EG:

Code: Select all

ifconfig tunX 10.90.90.2 netmask 255.255.255.0 mtu 1500 broadcast 10.90.90.255
Which is also one of the many reasons we always ask for logs at --verb 4

Re: MacOS: can't ping local network or any another actions

Posted: Tue May 29, 2018 2:27 pm
by TinCanTech
I also suggest you re-post your configs because the ones you have posted clearly do not work:

Server config:
EpicCompass wrote:
Tue May 29, 2018 12:57 pm

Code: Select all

xls-auth ta.key 0
There are other mistakes also ..

Re: MacOS: can't ping local network or any another actions

Posted: Tue May 29, 2018 3:30 pm
by EpicCompass
Sorry for tls-auth ta.key 0

It was typo in this post (on server all fine)

Here is all configs with ccd-file for client

Server

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
topology subnet
server 10.90.90.0 255.255.255.0
push "route 10.90.90.0 255.255.255.0"
keepalive 10 120
tls-auth ta.key 0
key-direction 0
cipher AES-128-CBC
auth SHA256
tun-mtu 1500
max-clients 100
persist-key
persist-tun
status openvpn-status.log
verb 4
client-config-dir ccd
client-to-client


MacOS client

client
dev tun
proto udp
remote *.*.*.* 255.255.255.0
resolv-retry infinite
nobind
tun-mtu 1500
persist-key
persist-tun
remote-cert-tls server
key-direction 1
cipher AES-128-CBC
auth SHA256
verb 4


cd for client

ifconfig tun1 10.90.90.9 netmask 255.255.255.0 mtu 1500 broadcast 10.90.90.255
ifconfig-push 10.90.90.9 255.255.255.0

Re: MacOS: can't ping local network or any another actions

Posted: Wed Jun 27, 2018 3:51 pm
by EpicCompass
Hi again

Issue was fixed

I`ve turned off internet traffic redirecting on server
And configure tunneling only for local links

Thank for your time and sorry for inconvenience

Re: MacOS: can't ping local network or any another actions

Posted: Tue Apr 04, 2023 3:18 am
by Ulziiskii
Same issue, How Can I fix it?

Please explain to me how can I do.

"I`ve turned off internet traffic redirecting on server
And configure tunneling only for local links"