I have a problem that is causing me to go bald(er). First Ill explain my setup: My server is Umbutu 16.04 with Virtualbox installed, there are 3 Tukeylinux (debian) VMs inside the server (LAMP, SAMBA, VPN). My problem lies with the VPN as everything else is working okay. I can coect to the VPN on a remote windows machine, can ping all of the servers, can see the site hosted by the LAMP server, and even have inteet access through the VPN. BUT I cant see the hosts inteal LAN machines or SAMBA server on the remote computer, I tried mapping a coection but I can't see anything on the work LAN from my remote computer, I can ping everyone though.
Here is a general idea of my network:
Router - static outside inteet coection and the gateway and dhcp server for the inside LAN. Static IP is 10.1.10.1
Ubuntu Server: IP is 10.1.10.200 and the 3 virtual machines in it are- LAMP-10.1.10.201 VPN-10.1.10.202 SAMBA-10.1.10.203
The VPN server assigns client addresses in the 10.92.141.0/24 network.
Everything is working in the LAN and everyone can see eachother, the lamp is just an inteal web server ruing a invoicing and inventory application. You can evem get on the LAMP site through the VPN!
As I said, remote clients can ping, but not see any shares on the LAN. I know that there is some name resolution issue going on but the fact I can ping inteal LAN machines but not coect to them even through names like fileserver is what I can't understand, and the fact that I can coect to the inteet through the VPN is whats confusing me. I can even SSH into all of the VMs no problem.
My client configuration is:
client
proto udp
dev tun
ca ca.crt
dh dh2048.pem
cert bgearhart.crt
key bgearhart.key
remote 23.31.xxx.xxx 1194
cipher DES-CBC
verb 2
mute 20
keepalive 10 120
comp-lzo
persist-key
persist-tun
float
resolv-retry infinite
nobind
Server configuration is:
port 1194
proto udp
dev tun0
ca keys/pcnm/ca.crt
cert keys/pcnm/pcnmvpn.crt
key keys/pcnm/pcnmvpn.key
dh keys/pcnm/dh2048.pem
server 10.92.147.0 255.255.255.0
crl-verify keys/pcnm/crl.pem
ifconfig-pool-persist servers/server/logs/ipp.txt
cipher DES-CBC
user nobody
group nogroup
status servers/server/logs/openvpn-status.log
log-append servers/server/logs/openvpn.log
verb 2
mute 20
max-clients 100
keepalive 10 120
client-config-dir /etc/openvpn/servers/server/ccd
tls-server
client-to-client
comp-lzo
persist-key
persist-tun
ccd-exclusive
push "route 10.92.147.0 255.255.255.0"
push "route 10.1.10.0 255.255.255.0"
push "redirect-gateway 10.1.10.1"
push "dhcp-option DNS 8.8.8.8"
And this is my client output: Fri Jul 15 20:12:27 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Fri Jul 15 20:12:27 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Jul 15 20:12:27 2016 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09
Enter Management Password:
Fri Jul 15 20:12:28 2016 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Jul 15 20:12:36 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jul 15 20:12:36 2016 UDPv4 link local: [undef]
Fri Jul 15 20:12:36 2016 UDPv4 link remote: [AF_INET]23.31.xxx.xxx:1194
Fri Jul 15 20:12:36 2016 VERIFY OK: depth=1, C=US, ST=NM, L=Los Lunas, O=Performance Computers, [email protected]
Fri Jul 15 20:12:36 2016 VERIFY OK: depth=0, C=US, ST=NM, L=Los Lunas, O=Performance Computers, OU=Office, CN=pcnmvpn, [email protected]
Fri Jul 15 20:12:36 2016 Data Chael Encrypt: Cipher 'DES-CBC' initialized with 64 bit key
Fri Jul 15 20:12:36 2016 Data Chael Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jul 15 20:12:36 2016 Data Chael Decrypt: Cipher 'DES-CBC' initialized with 64 bit key
Fri Jul 15 20:12:36 2016 Data Chael Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jul 15 20:12:36 2016 Control Chael: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Jul 15 20:12:36 2016 [pcnmvpn] Peer Coection Initiated with [AF_INET]23.31.114.154:1194
Fri Jul 15 20:12:39 2016 Options error: unknown --redirect-gateway flag: 10.1.10.1
Fri Jul 15 20:12:39 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Jul 15 20:12:39 2016 open_tun, tt->ipv6=0
Fri Jul 15 20:12:39 2016 TAP-WIN32 device [Etheet 2] opened: .Global{A538BF1A-6AFF-4F2C-A799-8D666BB9B6B8}.tap
Fri Jul 15 20:12:39 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.92.147.6/255.255.255.252 on interface {A538BF1A-6AFF-4F2C-A799-8D666BB9B6B8} [DHCP-serv: 10.92.147.5, lease-time: 31536000]
Fri Jul 15 20:12:39 2016 Successful ARP Flush on interface [13] {A538BF1A-6AFF-4F2C-A799-8D666BB9B6B8}
Fri Jul 15 20:12:44 2016 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists. [status=5010 if_index=13]
Fri Jul 15 20:12:44 2016 env_block: add PATH=C:WindowsSystem32;C:Windows;C:WindowsSystem32Wbem
Fri Jul 15 20:12:44 2016 Initialization Sequence Completed