Tjyylli

At my office we store all of our files on a Windows 2008 R2 file server, I set up a VPN using OpenVPN on a Ubuntu 18.04.2 LTS. While we are in the office, we have no problem accessing any of the files. Everyone can access and log on to the VPN without any issues but when they try to access the file server is when problems start to happen. About 60% of the staff log onto the VPN and can access the file server with no problem the first try. The rest either say it takes them 10-20 mins of just being logged onto the VPN before they can access the file server, or they never get access to the file server. I will post screenshots of the errors down below.

Everyone is running Windows 10 and everyone is using Bitdefender for there computer firewall. Bitdefender should disable the default windows firewall and should take over. Everyone is on the same predetermined profile that has the current rules that are applied.

Is there any setting or configurations on their personal computers or on the config files that could be limiting their ability to access the file server through the VPN? Thank you for your time and knowledge you share.

Error 1

Error 2

Server.conf

port 1194

proto udp

dev tun

user nobody

group nogroup

persist-key

persist-tun

keepalive 10 120

topology subnet

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "dhcp-option WINS 10.0.0.9"

push "dhcp-option DNS 208.67.222.222"

push "dhcp-option DNS 208.67.220.220"

push "redirect-gateway def1 bypass-dhcp"

push "dhcp-option NBDD 10.0.0.9"

push "dhcp-option NBT 4"

compress lz4

dh none

ecdh-curve prime256v1

tls-crypt tls-crypt.key 0

crl-verify crl.pem

ca ca.crt

cert server_XXX.crt

key server_XXX.key 

auth SHA256

cipher AES-128-GCM

ncp-ciphers AES-128-GCM

tls-server

tls-version-min 1.2

tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256

status /var/log/openvpn/status.log

verb 3

User.ovpn

client

proto udp

remote OfficeIP 1194

dev tun

resolv-retry infinite

nobind

persist-key

persist-tun

remote-cert-tls server

verify-x509-name server_XXX name

auth SHA256

auth-nocache

cipher AES-128-GCM

tls-client

tls-version-min 1.2

tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256

setenv opt block-outside-dns # Prevent Windows 10 DNS leak

verb 3

compress lz4

<ca>

-----BEGIN CERTIFICATE-----

....CERTIFICATE.....

-----END CERTIFICATE-----

</ca>

<cert>

-----BEGIN CERTIFICATE-----

....CERTIFICATE.....

-----END CERTIFICATE-----

</cert>

<key>

-----BEGIN ENCRYPTED PRIVATE KEY-----

....KEY...

-----END ENCRYPTED PRIVATE KEY-----

</key>

<tls-crypt>

#

# 2048 bit OpenVPN static key

#

-----BEGIN OpenVPN Static key V1-----

....KEY.....

-----END OpenVPN Static key V1-----

</tls-crypt>