OpenVPN addressing/routing problem

TVT · 12-05-2011, 03:43 PM

Hi!

I installed OpenVPN network (Windows client to Linux server), made all required setup using almost standard configuration.

Linux part starts OK end creates the following interface:

Code:

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:420 (420.0 B)

Windows part also runs OK and connects successfully to the server creating interface as follows:

Code:

Ethernet adapter Local Area Connection 7:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : TAP-Win32 Adapter V9
        Physical Address. . . . . . . . . : 00-FF-59-13-7B-AE
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 10.8.0.6
        Subnet Mask . . . . . . . . . . . : 255.255.255.252
        Default Gateway . . . . . . . . . :
        DHCP Server . . . . . . . . . . . : 10.8.0.5
        Lease Obtained. . . . . . . . . . : 5 грудня 2011 р. 23:25:04
        Lease Expires . . . . . . . . . . : 4 грудня 2012 р. 23:25:04

As far as address 10.8.0.5 which is the server's endpoint for the client does not really exist on the server side I suspect that client-server communication is hardly possible or I do not know something specific about OpenVPN technique. Neither 10.8.0.5 nor 10.8.0.1 is pingable from the client side and 10.8.0.6 is not pingable from the server side. Can anybody comment all this and what I might miss configuring the server/client?

I will supply more configuration data if required.

macemoneta · 12-06-2011, 12:08 AM

Your default gateway appears to be missing. Does your server config contain:

Code:

push "route 10.8.0.1 255.255.255.255"
push "redirect-gateway def1"

zooppoop · 12-06-2011, 03:20 AM

My first guess would be the windows firewall is not allowing communication to that new interface. have you disabled that? If it is connecting to the VPN, it would seem at least the VPN ports themselves are open and working, but the new interface isn't allowed to communicate. If there is a web server or something on the remote server you might try opening the page see what you can see. Otherwise could you provide a little more information. what would be helpful is:

From Windows:
ipconfig /all You are welcome to alter your public IP if you need just make sure most of the information is there so I can see how routing might be affected. If it is a private IP please do not alter the information.
Also a route print

From Linux
ifconfig -a
and netstat -rn

Otherwise not sure what you have control all over here but I would first check firewall settings both on linux and Windows. For other issues I have found that the Linux daemon does do a good amount of logging which might help determine the problem.

TVT · 12-06-2011, 01:33 PM

After reinstalling the latest OpenVPN version client the problem has been solved. Thank everybody for support!