Thu Mar 30 16:11:54 2017 WARNING: this configuration may cache passwords in memory - use the auth-nocache option to prevent this Thu Mar 30 16:11:53 2017 MANAGEMENT: CMD 'hold release' Thu Mar 30 16:11:52 2017 Need hold release from management interface, waiting.
#Openvpn redirect gateway windows
Thu Mar 30 16:11:52 2017 Windows version 6.2 (Windows 8 or greater) 64bit Ifmaxaddr 0 port 1 priority 128 path cost 2000000 Ifmaxaddr 0 port 4 priority 128 path cost 2000000 Maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200 Inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3 If you need any more information to solve my problem I'm happy to provide. Brace yourselfs it will be a lengthy one. I'll post my relevant sections of configuration and client output below.
Also, connected to my VPN, I visit a site to pinpoint my IP adress it doesn't change to the external IP of my server. Maybe its even a natting problem? Altough I've always thought of TAP bridged setups as it were true LAN clients and everything was configured from the start without much hassle of routing tables because the vpn is passing ethernet frames and not IP packets.
I'm thinking the problem is routing related however I'm not cappable enough to know what I should add to my servers routing table with this configuration. I test the connecting of a client through my laptop which is connected to a mobile hotspot over wifi, thus simulating external connections to my server. Although I see packets getting matched by IPFW over bridge0 and tap0 with ipfw show. But the issues remains, I can't reach any device behind my server (I can't even ping my server when connected). Right now I have configured my DHCP server to assign IP adresses up to 192.168.1.199 from 192.168.1.200 the VPN takes over. I have also tried to configure OpenVPN to receive a DHCP lease from my LAN's DHCP server but that didn't work either. When I'm connected to the VPN I cannot reach any device behind my firewall and thus my LAN (pinging, browsing SMB shares nothing works). Authentication is no problem with certificates and keys. Если используется: route 0.0.0.0 192.0.0.I have been struggling quite some time to get TAP bridge working on FreeBSD. This has the benefit of overriding but not wiping out the original default gateway. def1 - Use this flag to override the default gateway by using 0.0.0.0/1 and 128.0.0.0/1 rather than 0.0.0.0/0. When used on the client, this option effectively bars the server from adding routes to the client's routing table, however note that this option still allows the server to set the TCP/IP properties of the client's TUN/TAP interface. When used with -client or -pull, accept options pushed by server EXCEPT for routes and dhcp options like DNS servers. Instead pass routes to -route-up script using environmental variables.
0 kommentar(er)
