EFW Support

Support => VPN Support => Topic started by: rex007can on Tuesday 22 February 2011, 02:34:35 am



Title: Windows 7 routing issues
Post by: rex007can on Tuesday 22 February 2011, 02:34:35 am
The client config file is

client
dev tap
proto udp
remote ***.***.***.***
resolv-retry infinite
nobind
persist-key
persist-tun
ca vpn.pem
auth-user-pass
comp-lzo
route-method exe
route-delay 2
script-security 2 system


OpenVPN config (on Endian Firewall)

AUTH_TYPE=psk
CLIENT_TO_CLIENT=on
DOMAIN=....
DROP_DHCP=on
GLOBAL_DNS=192.168.192.12,192.168.192.13
GLOBAL_NETWORKS=192.168.192.0/24
OPENVPN_ENABLED=on
PORT=1194
PROTOCOL=udp
PURPLE_DEVICE=tap0
PURPLE_IP_BEGIN=192.168.192.20
PURPLE_IP_END=192.168.192.24
PURPLE_NET=
PUSH_DOMAIN=on
PUSH_GLOBAL_DNS=on
PUSH_GLOBAL_NETWORKS=on


I've narrowed down the issue to a route added to the client. It doesn't do this if the client is XP or Linux.
But if the client is Windows7, it adds a route like this
192.168.192.0 255.255.255.0 192.168.192.20 metric1 (192.168.192.20 is the IP assigned to the client by the VPN server)
And then it also adds
192.168.192.0 255.255.255.0 192.168.192.248 metric31

This creates a conflict and Windows doesn't route packets to the VPN gateway, so nothing gets through.
If I manually delete the rout
route delete 192.168.192.0
Then everything starts working properly.
I don't know why Windows7 adds the extra route, or why it puts a metric of 31 on the VPN route.


Title: Re: Windows 7 routing issues
Post by: jeliasson on Tuesday 10 May 2011, 05:57:34 am
I have the exact same problem!
Have you found any more information regarding this?


Title: Re: Windows 7 routing issues
Post by: jeliasson on Wednesday 11 May 2011, 03:10:50 am
Hey rex007can,

I came across an article by jpluimers who also have noticed this issue on a forum thread.
Since I had the same setup, eventought I would not imagine that that would be the issue, I simply disabled promiscous mode on the VMware ESXi host - and it's not working just fine.
Furthermore, I also removed the SNAT-rule (From OpenVPN to the green-zone) and it's working fine without it aswell.

I hope this helps the rest of you that are experiencing this problem!  :)

Forum link: http ://wiert.wordpress.com/2010/10/12/endian-firewall-connected-client-can-access-efw-but-no-other-hosts/
Remove spaces in link above


Title: Re: Windows 7 routing issues
Post by: Alishba on Monday 16 May 2011, 08:41:13 pm
http://dashquid.com (http://dashquid.com)
http://fatlossprofessional.co.uk (http://fatlossprofessional.co.uk)
http://fatlossprofessional.co.uk/how-to-lose-weight-fast/ (http://fatlossprofessional.co.uk/how-to-lose-weight-fast/)
http://mobilehelper.co.uk (http://mobilehelper.co.uk)
http://securetrip.co.uk (http://securetrip.co.uk)
http://whichpetcover.com (http://whichpetcover.com)
http://youtube.com (http://youtube.com)
http://wikipedia.org (http://wikipedia.org)
http://twitter.com (http://twitter.com)
http://amazon.com (http://amazon.com)