OPENVPN only able to connect to vpn server cannot see other machines

jfranco123
jfranco123 used Ask the Experts™
on
I am able to establish a vpn connection and ping both the server by internal name and vpn name I cannot see any other machines on the network
attached are my server logs client logs and both config files
client.log
server.log
client.txt
server.txt
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
I am able to connect directly but cannot contact any other machines on network
Martin KühnSystem Administrator

Commented:
Did you set the local network section correctly? (excerpt from pfsense configuration)
Protocol: UDP
Local port: 1194
Address pool: 192.168.200.0/24 (It should be an address range that you ''DONT'' currently use.)
Local Network: 192.168.1.0/24 (Whatever the network is that you want the VPN client to connect to)
Remote Network: blank
Cryptography: BF-CBC (128 bit) - or use what you want
Authentication Method: PKI

Author

Commented:
I have everything setup above and I have the same issue just different ip pools
Fundamentals of JavaScript

Learn the fundamentals of the popular programming language JavaScript so that you can explore the realm of web development.

As I mentioned in the other question you opened, it's a routing issue.  Can you ping the IP of the OpenVPN server from one of the other machines on your network (the OpenVPN IP, not the LAN IP)?

Author

Commented:
no I am unable to ping the open vpn ip from the other machines on the lan only the one that I am connected with. I changed my ip scheme to 192.168.200.0 for the openvpn my lan uses 192.168.0.1
her is my new server config file
local 192.168.0.59
server 192.168.200.0 255.255.255.0
port 5959
route "192.168.0.0 255.255.255.0"
push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway"
proto udp
max-clients 100
mssfix 1400
persist-key
dev tap
dh "C:/Program Files/OpenVPN/easy-rsa/keys/dh1024.pem"
ca "C:/Program Files/OpenVPN/easy-rsa/keys/ca.crt"
cert "C:/Program Files/OpenVPN/easy-rsa/keys/pracvpn.crt"
key "c:/program files/openvpn/easy-rsa/keys/pracvpn.key"
keepalive 10 120        
comp-lzo
script-security 2
status openvpn-status.log
verb 3

Qlemo"Batchelor", Developer and EE Topic Advisor
Top Expert 2015

Commented:
jfranco,

It isn't effective to let Experts work on the same issue in more than one thread at any time. Both jfranco and me have tried to explain what to do to get the OpenVPN network routed on the LAN, and the LAN routed on the client. I think it is best to re-accept http:/Q_26535613.html (making the client config work in that way that the connection is established), and then close either this or the other open thread http:/Q_26552082.html. Doing otherwise would require to reduce the points in each question, as they may not sum up to more than 500 points for the same topic. Reducing can only be done by Moderators.

Author

Commented:
this is the only one I have open now... I still cannot see any other hosts on the network,
no I am unable to ping the open vpn ip from the other machines on the lan only the one that I am connected with. I changed my ip scheme to 192.168.200.0 for the openvpn my lan uses 192.168.0.1
her is my new server config file
local 192.168.0.59
server 192.168.200.0 255.255.255.0
port 5959
route "192.168.0.0 255.255.255.0"
push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway"
proto udp
max-clients 100
mssfix 1400
persist-key
dev tap
dh "C:/Program Files/OpenVPN/easy-rsa/keys/dh1024.pem"
ca "C:/Program Files/OpenVPN/easy-rsa/keys/ca.crt"
cert "C:/Program Files/OpenVPN/easy-rsa/keys/pracvpn.crt"
key "c:/program files/openvpn/easy-rsa/keys/pracvpn.key"
keepalive 10 120        
comp-lzo
script-security 2
status openvpn-status.log
verb 3

On one of your other LAN PCs, open a command prompt.  Type in "route add 192.168.200.0 mask 255.255.255.0 192.168.0.XXX" where XXX is the LAN IP of your OpenVPN server.

Then see if you can communicate with this device over the VPN.  If so, the route you added to your router earlier is incorrect.

Author

Commented:
Yes when I added the route I was able to communicate with the device
So you need to change the route you added to your LAN's router.  It should be similar - Route all 192.168.200.0 traffic through the OpenVPN server.

Otherwise you'll need to manually add the route to each PC you want to connect to.   I do not recommend that.
Qlemo"Batchelor", Developer and EE Topic Advisor
Top Expert 2015

Commented:
I absolutely agree, and that is what I have told you earlier already.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial