Page 1 of 1

Connect Success - now what

Posted: Fri Aug 27, 2010 8:17 pm
by BiloxiBoy
Hi All,
I've successfully built my first openVPN server on Ubuntu server and it connects using a bridge, but I must be missing something because I can't access any of my servers.

The connection assigns me a random IP address from the pool which I can ping remotely but I can't access it through the VPN tunnel. When ever I try and access it, it requests a username and password. I wasn't asked to provide either a username or password during installation so not sure what to enter for access.

Also, I can't access any of my other internal IP addresses on the server through the tunnel. Did I miss something?

Here is my server configuration file:
local 192.168.1.16 #IP openVPN listens on
port 1200
proto udp
dev tap0
up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.1.16 255.255.255.0 192.168.1.2 192.168.1.40
keepalive 10 120
tls-auth ta.key 0
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 1
Here is my client config:
client
dev tap
proto udp
remote XXX.XXX.XXX.XXX 1200
route 192.168.1.0 255.255.255.0 vpn_gateway 3
resolv-retry infinite
nobind
tls-auth ta.key 1
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\alpha.crt"
key "C:\\Program Files\\OpenVPN\\config\\alpha.key"
ns-cert-type server
cipher BF-CBC
comp-lzo
verb 1

Re: Connect Success - now what

Posted: Sat Aug 28, 2010 2:36 am
by BiloxiBoy
Here's an update, should someone else be having this problem.

First some background:
Client is running on a class C router: 192.168.0.x
Server is running on a class C router: 192.168.1.x

I have discovered that the login prompt comes for IIS on the client. I need to do some more investigation, but it appears that IIS has grabbed a subnet on my XP client and uses 192.168.1.x. Hence the login prompt and a conflict.

The only solutions that I can see is to get a Class B router for the server or uninstall IIS on the client.

Has anyone else had this problem and discovered a solution?

I know that someone will suggest that I use VPN routing instead of a VPN bridge, but unless I'm misinformed, VPN routing will only allow me to access just the server hosting openVPN and no other servers on the network.

If someone can provide me with some tips or direction, it will be most appreciated. This is my first attempt at this

Re: Connect Success - now what

Posted: Tue Sep 07, 2010 4:09 am
by krzee
http://www.secure-computing.net/wiki/in ... PN/Routing for lans behind openvpn in a routed tun setup :D