i ve just installed Open VPN 2.5 Server on a fresh windows 10 virtual machine.
i can connect to my vpn, get an ip and ping the vpn server's ip (10.8.0.1), the host's ip (192.168.1.5) and the client (10.8.0.6) but i can't go further on my LAN... for exemple i can't ping 192.168.1.3 which is an alive server on my LAN, of course authorized to answer at ICMP request..
VPN ip : 10.8.0.1
VPN ip client (my mobile phone for exemple) : 10.8.0.6
server IP : 192.168.1.5
gateway : 192.168.1.1 (internet provider router)
and all my machines are on 192.168.1.x ip range (very simple LAN)
server config:
[oconf=]
port xxxxx
proto udp4
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
persist-key
persist-tun
status openvpn-status.log
verb 4
[oconf]
client config:
[oconf]
client
proto udp4
dev tun
remote aaa.bbb.ccc xxxxx
resolv-retry infinite
nobind
ca ca.crt
cert cert.crt
key key.key
route-delay 2
route-method exe
redirect-gateway def1
persist-key
persist-tun
verb 4
[/oconf]
routing table on server :
destination / mask / gateway / interface / metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.5 26
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 281
10.8.0.0 255.255.255.252 On-link 10.8.0.1 281
10.8.0.1 255.255.255.255 On-link 10.8.0.1 281
10.8.0.3 255.255.255.255 On-link 10.8.0.1 281
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
192.168.1.0 255.255.255.0 On-link 192.168.1.5 281
192.168.1.5 255.255.255.255 On-link 192.168.1.5 281
192.168.1.255 255.255.255.255 On-link 192.168.1.5 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 192.168.1.5 281
224.0.0.0 240.0.0.0 On-link 10.8.0.1 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 192.168.1.5 281
255.255.255.255 255.255.255.255 On-link 10.8.0.1 281
on win10 i have enabled routing ("EnableRouter" regedit value to 1) and started routing service "RemoteAccess" and disabled firewall (for tests only
)do you have any idea ?
Thanks