Page 1 of 1
Ping Problem
Posted: Mon Apr 18, 2011 2:06 pm
by waaalex
Hello everyone,
I've got a probleme to ping local network from my Openvpn client.
Openvpn server on Windows 2003 with 10.8.0.1/ 255.255.255.252 and 192.168.92.2. Client openvpn with Windows 7 10.8.0.6/255.255.255.252 and 192.168.1.x.
Connection to Openvpn OK.
I'm able to ping 192.168.92.2 and 10.8.0.1 from windows 7
From W2003, i'm able to ping 10.8.0.6
BUT,
from client I can't ping 192.168.92.1 for example.
Here's my conf :
server
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.92.0 255.255.255.0"
comp-lzo
max-clients 3
persist-key
persist-tun
verb 3
client
client
dev tun
proto udp
remote xxx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
comp-lzo
verb 3
I have enabled IP route in registry and desactivate routing and remote access service in the server.
On the gateway, i've configured port forwarding, firewall and route to 10.8.0.0.
With wireshark, i can see that ping is stoped on server's interfaces. I've already installed openvpn with those OS and there is no problem to ping local network.
Any idea? Is the probleme is on the gateway?
Thank you
Re: Ping Problem
Posted: Tue Apr 19, 2011 6:40 am
by maikcat
hi there,
please post the output of netstat -nr on your server and client.
Michael.
Re: Ping Problem
Posted: Tue Apr 19, 2011 10:32 am
by janjust
check the firewalling rules on the win2003 box - make sure the tap-win32 adapter is not firewalled and/or that forwarding is enabled.
also check the local security policies, these interfere with forwarding packets as well sometimes.
Re: Ping Problem
Posted: Tue Apr 19, 2011 2:00 pm
by waaalex
Thank you for reply.
I'm having some problems today and I'll post netstat -r and verify firewalling tomorrow.
thank you
Re: Ping Problem
Posted: Wed Apr 20, 2011 11:50 am
by waaalex
Hello,
here's netstat -r
############# SERVER ###############
C:\Program Files\OpenVPN\easy-rsa>netstat -r
IPv4 Table de routage
===========================================================================
Liste d'Interfaces
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 6f 0a 99 8d ...... TAP-Win32 Adapter V8 - Trend Micro Common Firew
ll Miniport
0x10004 ...00 1e 0b 1f a4 3e ...... HP NC373i Multifunction Gigabit Server Adap
er - Trend Micro Common Firewall Miniport
===========================================================================
===========================================================================
Itinéraires actifs :
Destination réseau Masque réseau Adr. passerelle Adr. interface Métrique
0.0.0.0 0.0.0.0 192.168.92.100 192.168.92.2 10
10.8.0.0 255.255.255.252 10.8.0.1 10.8.0.1 30
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 1
10.8.0.1 255.255.255.255 127.0.0.1 127.0.0.1 30
10.255.255.255 255.255.255.255 10.8.0.1 10.8.0.1 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.92.0 255.255.255.0 192.168.92.2 192.168.92.2 10
192.168.92.2 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.92.255 255.255.255.255 192.168.92.2 192.168.92.2 10
224.0.0.0 240.0.0.0 10.8.0.1 10.8.0.1 30
224.0.0.0 240.0.0.0 192.168.92.2 192.168.92.2 10
255.255.255.255 255.255.255.255 10.8.0.1 10.8.0.1 1
255.255.255.255 255.255.255.255 192.168.92.2 192.168.92.2 1
Passerelle par défaut : 192.168.92.100
===========================================================================
Itinéraires persistants :
Aucun
##################################################
############# CLIENT ##################
C:\Users\alex>netstat -r
===========================================================================
Liste d'Interfaces
15...00 ff e6 30 4d ac ......TAP-Win32 Adapter V9
12...00 22 68 10 df c8 ......Broadcom NetLink (TM) Gigabit Ethernet
11...00 1e 65 2b b6 72 ......Intel(R) WiFi Link 5100 AGN
18...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
19...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
1...........................Software Loopback Interface 1
24...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP
13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
14...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #2
16...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #4
20...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #5
21...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #6
===========================================================================
IPv4 Table de routage
===========================================================================
Itinéraires actifs :
Destination réseau Masque réseau Adr. passerelle Adr. interface Métrique
0.0.0.0 0.0.0.0 192.168.0.254 192.168.0.11 20
10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 30
10.8.0.4 255.255.255.252 On-link 10.8.0.6 286
10.8.0.6 255.255.255.255 On-link 10.8.0.6 286
10.8.0.7 255.255.255.255 On-link 10.8.0.6 286
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.0.0 255.255.255.0 192.44.44.20 192.168.0.11 21
192.168.0.11 255.255.255.255 On-link 192.168.0.11 276
192.168.87.0 255.255.255.0 On-link 192.168.87.1 276
192.168.87.1 255.255.255.255 On-link 192.168.87.1 276
192.168.87.255 255.255.255.255 On-link 192.168.87.1 276
192.168.92.0 255.255.255.0 10.8.0.5 10.8.0.6 30
192.168.200.0 255.255.255.0 On-link 192.168.200.1 276
192.168.200.1 255.255.255.255 On-link 192.168.200.1 276
192.168.200.255 255.255.255.255 On-link 192.168.200.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.0.11 276
224.0.0.0 240.0.0.0 On-link 10.8.0.6 286
224.0.0.0 240.0.0.0 On-link 192.168.200.1 276
224.0.0.0 240.0.0.0 On-link 192.168.87.1 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.0.11 276
255.255.255.255 255.255.255.255 On-link 10.8.0.6 286
255.255.255.255 255.255.255.255 On-link 192.168.200.1 276
255.255.255.255 255.255.255.255 On-link 192.168.87.1 276
===========================================================================
Itinéraires persistants :
Aucun
IPv6 Table de routage
===========================================================================
Itinéraires actifs :
If Metric Network Destination Gateway
12 276 ::/0 fe80::224:d4ff:feb3:ec41
1 306 ::1/128 On-link
13 58 2001::/32 On-link
13 306 2001:0:5ef5:79fd:480:88c:3f57:fff4/128
On-link
12 28 2a01:e35:8a47:2730::/64 On-link
12 276 2a01:e35:8a47:2730:81e1:79c2:56f0:ca65/128
On-link
12 276 2a01:e35:8a47:2730:848b:2bfd:2b08:2dad/128
On-link
12 276 fe80::/64 On-link
15 286 fe80::/64 On-link
18 276 fe80::/64 On-link
19 276 fe80::/64 On-link
13 306 fe80::/64 On-link
13 306 fe80::480:88c:3f57:fff4/128
On-link
18 276 fe80::539:ab6f:304a:a059/128
On-link
15 286 fe80::49f8:f5fd:dc9f:d8da/128
On-link
12 276 fe80::848b:2bfd:2b08:2dad/128
On-link
19 276 fe80::880a:adc3:2341:25f1/128
On-link
1 306 ff00::/8 On-link
13 306 ff00::/8 On-link
12 276 ff00::/8 On-link
15 286 ff00::/8 On-link
18 276 ff00::/8 On-link
19 276 ff00::/8 On-link
===========================================================================
Itinéraires persistants :
Aucun
##########################################
I've verified firewalling on NICS. Windows' Firewall is inactive.
Local security settings seems to be by default. But I don't know which parameters i have to verify.
I've enable HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter
Antivirus is off.
Re: Ping Problem
Posted: Wed Apr 20, 2011 1:09 pm
by maikcat
hi there,
i noticed the following
>TAP-Win32 Adapter V8 - Trend Micro Common Firewall Miniport
2 things
V8? what version are you using?
also besides win firewall you have trends enabled as well...
can you disable it?
ps:the 192.168.92.1 ip,did you add a static route for the vpn network to it?
Michael
Re: Ping Problem
Posted: Tue Apr 26, 2011 3:48 pm
by waaalex
Yes, it work now.
I've reinstalled windows for other reasons but when i've reinstalled openvpn, trend asked me if i could pass through his scan (i'm very bad in english ^^)
So it works. Thank you to openvpn forum
Re: Ping Problem
Posted: Wed Apr 27, 2011 6:55 am
by maikcat
happy to help you out.
Closing topic.
Michael.