OpenVPN troubles

Hi!

I have a problem with my network.
The situation is as follows: Suse 9 server with OpenVPN 2.0.2, Windows
XPSP2 clients with OpenVPN 2.0.2. Some of these clients are to be moved
elsewhere and need to connect to the server.
OpenVPN starts fine on both server and clients and I'm able to get a
tunnel as long as the computers are connected to the internal network.

As soon as I try to connect via the internet, the clients time out. It
looks like they can't even connect to the server. Now, I've turned off
the firewall and forwarded port 1194 (the one I use) from the router
(Teledat 630) to the server.
I still can't get them to connect.

What am I missing?

Regards,

Joachim

Joachim Ziebs wrote:
>Hi!
>
>I have a problem with my network.
>The situation is as follows: Suse 9 server with OpenVPN 2.0.2, Windows
>XPSP2 clients with OpenVPN 2.0.2. Some of these clients are to be moved
>elsewhere and need to connect to the server.
>OpenVPN starts fine on both server and clients and I'm able to get a
>tunnel as long as the computers are connected to the internal network.
>
>As soon as I try to connect via the internet, the clients time out. It
>looks like they can't even connect to the server. Now, I've turned off
>the firewall and forwarded port 1194 (the one I use) from the router
>(Teledat 630) to the server.
>I still can't get them to connect.
>
>What am I missing?

Are you forwarding a UDP or a TCP port?

--
Maurice

Joachim Ziebs wrote:
> Hi!
>
> I have a problem with my network.
> The situation is as follows: Suse 9 server with OpenVPN 2.0.2, Windows
> XPSP2 clients with OpenVPN 2.0.2. Some of these clients are to be moved
> elsewhere and need to connect to the server.
> OpenVPN starts fine on both server and clients and I'm able to get a
> tunnel as long as the computers are connected to the internal network.
>
> As soon as I try to connect via the internet, the clients time out. It
> looks like they can't even connect to the server. Now, I've turned off
> the firewall and forwarded port 1194 (the one I use) from the router
> (Teledat 630) to the server.
> I still can't get them to connect.

So you are having a remote station and
a NAT/port forwarded network with a server
responding to the port 1194 (the UDP and
TCP port are different things).

Which end of the VPN is initiating the
connection?

Is the VPN a data-link layer (tap0) or
network-layer (tun0) tunnel?

If the tunnel is a network-layer tunnel,
how are routes set up in the computers
involved?

Run tcpdump or Ethereal in all the boxes involved
and see if port 1194 traffic gets in and out.

--

Tauno Voipio
tauno voipio (at) iki fi

Hi Maurice!

Maurice Janssen wrote:

>>I have a problem with my network.
>>The situation is as follows: Suse 9 server with OpenVPN 2.0.2, Windows
>>XPSP2 clients with OpenVPN 2.0.2. Some of these clients are to be moved
>>elsewhere and need to connect to the server.
>>OpenVPN starts fine on both server and clients and I'm able to get a
>>tunnel as long as the computers are connected to the internal network.
>>
>>As soon as I try to connect via the internet, the clients time out. It
>>looks like they can't even connect to the server. Now, I've turned off
>>the firewall and forwarded port 1194 (the one I use) from the router
>>(Teledat 630) to the server.
>>I still can't get them to connect.
>>
>>What am I missing?
>
> Are you forwarding a UDP or a TCP port?

Actually both of them, just to make sure.
However, it seems that simply waiting has made it work. Without changing
anything in the configuration, it worked as of this morning.

Whoever has worked magic here, thank you!

Regards,

Joachim