Page 1 of 1

Client cannot seem to connect to server

Posted: Mon Jul 06, 2009 4:06 am
by tylerm03
Hi, hoping someone here can help me with some issues im having with openVPN.

I'm trying to allow a laptop to connect to the office network over the internet to access files and use the offices internet service.

I'm using bridging

The set-up at office

Internet -> Router -> Server
124.xxx.xxx.xxx -> 10.0.0.138 -> 10.0.0.20

and at home

Internet -> Router -> Client
126.xxx.xxx.xxx -> 192.168.2.1 -> 192.168.2.2

Both computers are running Windows XP SP3

Routers are set to forward 1194 to respective addresses.
-------------
server.ovpn
-------------
local 10.0.0.20
port 1194
proto udp
dev tap
dev-node tap-bridge
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
ifconfig-pool-persist ipp.txt
server-bridge 10.0.0.20 255.255.255.0 10.0.0.240 10.0.0.250
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6

--------------
client1.ovpn
-------------
client
dev tap
proto udp
remote 124.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client1.crt" # Change the next two lines to match the files in the keys directory. This should be be different for each client.
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client1.key" # This file should be kept secret
ns-cert-type server
comp-lzo
verb 6

Re: Client cannot seem to connect to server

Posted: Sun Jul 19, 2009 9:22 pm
by krzee
You never actually said what your problem is...
"**If you are having problems connecting, post your logfiles from server and client after using verb 6 in both configs"

Also, why are you using bridging?
"**You ONLY want to use dev tap if you are tunneling layer2 traffic, if you are using IP traffic you want tun. If you are using tap only for windows file sharing, look into running a WINS server instead."