OpenVPN Connects but not Routing Traffic

[dbunyard]

I went to enable and configure OpenVPN tonight but am having some trouble. The internal network I'm connecting to has addresses in the 10.37.56.0/22 range, the network I'm connecting from is 192.168.9.0/24. I have OpenVPN set up to hand out 172.16.2.0/24 addresses. The Untangle device is running in bridged mode. The connection establishes just fine and assigns me an IP address but I am not able to access any of the network resources. I assumed that since the connection establishes that the port forward I set up is working correctly. I have the internal network in the "Exported Hosts and Networks" and it's enabled. I have checked the Packet Filter rule "Route VPN traffic that would go through the bridge" as well as configured a static route in my SonicWall device for the 172.16.2.0/24 network to use 10.37.59.236 (the Untangle's IP) as the gateway but it still will not work. The log in the OpenVPN client says this:

Tue Feb 09 19:16:11 2010 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct  1 2006
Tue Feb 09 19:16:11 2010 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Feb 09 19:16:11 2010 LZO compression initialized
Tue Feb 09 19:16:11 2010 UDPv4 link local: [undef]
Tue Feb 09 19:16:11 2010 UDPv4 link remote: 209.143.16.8:1194
Tue Feb 09 19:16:12 2010 [server.does.not.exists] Peer Connection Initiated with 209.143.16.8:1194
Tue Feb 09 19:16:13 2010 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{8DD50EB2-E545-418C-9558-D5AC6C6E67A1}.tap
Tue Feb 09 19:16:13 2010 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.16.2.1/255.255.255.252 on interface {8DD50EB2-E545-418C-9558-D5AC6C6E67A1} [DHCP-serv: 172.16.2.2, lease-time: 31536000]
Tue Feb 09 19:16:13 2010 Successful ARP Flush on interface [22] {8DD50EB2-E545-418C-9558-D5AC6C6E67A1}
Tue Feb 09 19:16:15 2010 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct.   [if_index=22]
Tue Feb 09 19:16:15 2010 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct.   [if_index=22]
Tue Feb 09 19:16:15 2010 Initialization Sequence Completed
Tue Feb 09 19:17:58 2010 SIGTERM[hard,] received, process exiting

Any help would be appreciated, thanks!!!!

[gotkimchi]

What OS are you using?

[dbunyard]

Windows 7 x86. I have downloaded the latest client from http://openvpn.se/download.html and the client works with my Endian OpenVPN connection. I exported the configs for my user in the Untangle box and just put them into the config directory in OpenVPN under Program Files.

[gotkimchi]

are you running it as an administrator, if not, could you try that and see if that works.

[dbunyard]

UAC is disabled hence I don't have that option.

[gotkimchi]

do you have a XP machine? I would try that first. If that works, most likely something to do with Windows7. If the XP does not work, most likely some setting(s) incorrect.

[dbunyard]

The XP machine works fine so it must be something stupid in 7. I tried it again after I got the XP machine to work and the 7 machine will still not connect properly. I will play around with it here and see if I can come up with anything else.

[sky-knight]

Windows 7 requires the most current release from openvpn.net. Go download the new client and upgrade, see if that clears you up.

[dbunyard]

On the web site it says:

Client Web Interface:
The Client Web Interface can be accessed via a preferred web browser by inserting the following address into the address bar:
https://openvpnasip:943 (Please replace "openvpnasip" with the IP you allocated to your openvpn-as instance)


Once the client has logged into the Client Web Interface with their credentials they will have the option to download the Windows Installer with their pre-bundled certs of their individual certificate:

There is no link to download the client from there, only the server.

[dbunyard]

Nevermind....I had a stupid Dan moment. I installed the latest client and it's working now, thanks for you help!!!!!!!!

[sky-knight]

Not stupid, just tired and a bit over worked.

The quality and lack of ability of the OpenVPN guys to produce a functional VPN product over the last year has been very frustrating. But, most of us UT veterans are well used to simply grabbing the latest client and going from there. WebFool has done wonders to get current software into the project, but Untangle needs time to vet the changes and get them into the code tree.

[Solignis]

Yeah, I have ran OpenVPN in a standalone server and with Untangle, it is nice but when it comes to actually making it work. I stick with RAS. It just works!!