Page 1 of 1

Ver. 3.4.1 connects to VPN server but there is no traffic to the LAN

Posted: Fri Aug 25, 2023 7:05 pm
by ahguerra
Hi,
I installed openvpn-connect-3.4.1.3150_signed.msi in a Windows 10 workstation, it connects to the VPN Server but there is no traffic, not ping, not ssh, nothing.

=== The VPN Server is a Mikrotik router running RouterOS 6.48.6
VPN Server IP: 10.34.100.1
LAN IP: 192.168.1.0/24
Router public IP: 190.18.185.247 (DDNS)

=== Client side:
LAN: 192.168.20.0/24
Public IP: 190.16.52.27 (DDNS)
two certificates, user, password + passphrase

C:\WINDOWS\system32>route print (while the vpn connection is established)
===========================================================================
ILista de interfaces
24...00 ff 3d 46 2a 47 ......TAP-Windows Adapter V9 for OpenVPN Connect
7...7a 57 69 fe 9c a2 ......Intel(R) PRO/1000 MT Network Connection
28...........................OpenVPN Data Channel Offload
1...........................Software Loopback Interface 1
===========================================================================

IPv4 Tabla de enrutamiento
===========================================================================
Rutas activas:
Destino de red Máscara de red Puerta de enlace Interfaz Métrica
0.0.0.0 0.0.0.0 192.168.20.1 192.168.20.196 25
127.0.0.0 255.0.0.0 En vínculo 127.0.0.1 331
127.0.0.1 255.255.255.255 En vínculo 127.0.0.1 331
127.255.255.255 255.255.255.255 En vínculo 127.0.0.1 331
172.16.100.0 255.255.255.0 En vínculo 172.16.100.100 257
172.16.100.100 255.255.255.255 En vínculo 172.16.100.100 257
172.16.100.255 255.255.255.255 En vínculo 172.16.100.100 257
190.18.185.247 255.255.255.255 192.168.20.1 192.168.20.196 281
192.168.1.0 255.255.255.0 10.34.100.1 172.16.100.100 257
192.168.20.0 255.255.255.0 En vínculo 192.168.20.196 281
192.168.20.196 255.255.255.255 En vínculo 192.168.20.196 281
192.168.20.255 255.255.255.255 En vínculo 192.168.20.196 281
224.0.0.0 240.0.0.0 En vínculo 127.0.0.1 331
224.0.0.0 240.0.0.0 En vínculo 192.168.20.196 281
224.0.0.0 240.0.0.0 En vínculo 172.16.100.100 257
255.255.255.255 255.255.255.255 En vínculo 127.0.0.1 331
255.255.255.255 255.255.255.255 En vínculo 192.168.20.196 281
255.255.255.255 255.255.255.255 En vínculo 172.16.100.100 257
===========================================================================

The .ovpn config file:
-----------------------------------
client
dev tun
proto tcp
remote aguerra.no-ip.biz 1194 #X.X.X.X replace with your public IP Address
resolv-retry infinite
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server
ca ca-snj2.crt #Change the name certificates you exported for CA
cert snj2.crt #Change the name certificates you exported For Remote user
key snj2.key #Change the name key you exported For Remote user
cipher AES-128-CBC
auth SHA1
pull
auth-user-pass
verb 3
route 192.168.1.0 255.255.255.0
-----------------------------------

Note: is important to mention that if I replace the Windows 10 client with a Ubuntu client using the native VPN conection
I can connect tho the whole router's LAN via ssh, ping, etc.

What may be wrong here in the windows vpn config?
Regards

Re: Ver. 3.4.1 connects to VPN server but there is no traffic to the LAN

Posted: Sun Aug 27, 2023 8:46 pm
by ahguerra
Here is the log:

Sun Aug 27 17:43:00 2023 proxy_auto_config_url
Sun Aug 27 17:43:02 2023 TUN SETUP
TAP ADAPTERS:
guid='{45BBF587-E1D1-4044-90FE-8026CB6730B7}' index=24 name='Conexión de área local'
Open TAP device "Conexión de área local" PATH="\\.\Global\{45BBF587-E1D1-4044-90FE-8026CB6730B7}.tap" SUCCEEDED
TAP-Windows Driver Version 9.26
ActionDeleteAllRoutesOnInterface iface_index=24
netsh interface ip set interface 24 metric=1
Aceptar
netsh interface ip set address 24 static 172.16.100.100 255.255.255.0 gateway=10.34.100.1 store=active
IPHelper: add route 192.168.1.0/24 24 10.34.100.1 metric=-1
ipconfig /flushdns
Configuración IP de Windows
Se vació correctamente la caché de resolución de DNS.
TAP: ARP flush succeeded
Sun Aug 27 17:43:02 2023 NETWORK_RECV_ERROR
Sun Aug 27 17:43:02 2023 INSTANCE STOP : E_TCP : HTTPCore TCP: NETWORK_RECV_ERROR
Sun Aug 27 17:43:02 2023 TUN CONFIRM

Re: Ver. 3.4.1 connects to VPN server but there is no traffic to the LAN

Posted: Sun Aug 27, 2023 8:59 pm
by ahguerra
Another log:

Sun Aug 27 17:54:19 2023 proxy_auto_config_url
Sun Aug 27 17:54:22 2023 TUN SETUP
TAP ADAPTERS:
guid='{45BBF587-E1D1-4044-90FE-8026CB6730B7}' index=24 name='Conexión de área local'
Open TAP device "Conexión de área local" PATH="\\.\Global\{45BBF587-E1D1-4044-90FE-8026CB6730B7}.tap" SUCCEEDED
TAP-Windows Driver Version 9.26
ActionDeleteAllRoutesOnInterface iface_index=24
netsh interface ip set interface 24 metric=1
Aceptar
netsh interface ip set address 24 static 172.16.100.100 255.255.255.0 gateway=10.34.100.1 store=active
netsh interface ipv6 add route 2000::/4 interface=1 store=active
Aceptar
netsh interface ipv6 add route 3000::/4 interface=1 store=active
Aceptar
netsh interface ipv6 add route fc00::/7 interface=1 store=active
Aceptar
IPHelper: add route 192.168.1.0/24 24 10.34.100.1 metric=-1
ipconfig /flushdns
Configuración IP de Windows
Se vació correctamente la caché de resolución de DNS.
TAP: ARP flush succeeded
Sun Aug 27 17:54:22 2023 TUN CONFIRM
=====================

I'm not sure but it seems the routes are wrong as the server IP is 10.34.100.1 while the gateway is 172.16.100.100

Re: Ver. 3.4.1 connects to VPN server but there is no traffic to the LAN

Posted: Mon Aug 28, 2023 8:23 pm
by ahguerra
Please disregard this problem as I finally uninstalled OpenVPN Connect and moved the VPN to L2TP which has a native client for Windows so I can get rid of dealing with that.