ANSWERED Guide - Fix for TAP adapter in Windows

[Flx11 10]

Hello,

Instead of reseting it manually every now and then, now you can do this automatically. And stay/be connected 24/7 through the VPN.
The issue then when trying to connect remotely (e.g. office/other location) to the home computer that's connected to AirVPN.
Your client IP will be reset to 10.3.0.1 or 169.x.x.x. In that case OpenVPN-GUI will still show Connected, but in fact it's not.
1)This small batch file(see below) will ensure that the TAP-adapter will not disconnect.
---------------------------------dhcp.tap.adapter.bat-------------------------------------------
@ECHO OFF
:LOOP
ECHO Waiting for 300 seconds....
timeout /t 300
netsh interface ip set address tapadapter DHCP
netsh interface ip set address tapadapter DHCP
netsh int ip set dns name = "tapadapter" source = dhcp
ipconfig /all
GOTO LOOP
---------------------------------dhcp.tap-adapter.bat-------------------------------------------

2)After the connection has been established to AirVPN(UDP/TCP or OpenVPN over SSL/SSH) run the above file dhcp.tap.adapter.bat.
Run as Admin if elevation is required.
Regards,
Flex

[3vSIMdRVv6Q1TmbFsIiP8QV8 1]

Thanks for this post

 

Hello,

Instead of reseting it manually every now and then, now you can do this automatically. And stay/be connected 24/7 through the VPN.
The issue then when trying to connect remotely (e.g. office/other location) to the home computer that's connected to AirVPN.
Your client IP will be reset to 10.3.0.1 or 169.x.x.x. In that case OpenVPN-GUI will still show Connected, but in fact it's not.
1)This small batch file(see below) will ensure that the TAP-adapter will not disconnect.
---------------------------------dhcp.tap.adapter.bat-------------------------------------------
@ECHO OFF
:LOOP
ECHO Waiting for 300 seconds....
timeout /t 300
netsh interface ip set address tapadapter DHCP
netsh interface ip set address tapadapter DHCP
netsh int ip set dns name = "tapadapter" source = dhcp
ipconfig /all
GOTO LOOP
---------------------------------dhcp.tap-adapter.bat-------------------------------------------

2)After the connection has been established to AirVPN(UDP/TCP or OpenVPN over SSL/SSH) run the above file dhcp.tap.adapter.bat.
Run as Admin if elevation is required.
Regards,
Flex

Thanks for this post... this does describe the problem I've been having. My tunnel seems to collapse at 11:59 am and pm with at lest one more random time during the day. 

I've done as instructed with the .bat file, now there is a cmd window open and counting down from 300, with "press any key to continue...." do I need to leave that open? 

Thanks again, I hope this keeps my connection on 24/7 with the client.

[3vSIMdRVv6Q1TmbFsIiP8QV8 1]

I left it running for about 6 hours, but eventually, the tunnel collapsed and the VPN client still thought it was connected. I still have to manually uninstall the tap and then run the VPN client and let it reinstall the tap. 

[LZ1 672]

Hello !

 

@OP

Good stuff. Maybe you should change to title to include the word "Guide" somewhere, to make it more clear for people.

 

@3vSIM

Are you using the Eddie client by any chance and perhaps with Network Lock? Just curious.

[Flx11 10]

Thanks again, I hope this keeps my connection on 24/7 with the client.

Yes it will. Now you can also change the timeout /t 300. I now have it set to 100 seconds and it works. 

I left it running for about 6 hours, but eventually, the tunnel collapsed and the VPN client still thought it was connected. 

That will happen sometimes. If OpenVPN is diconnected it will just reconnect.

I still have to manually uninstall the tap and then run the VPN client and let it reinstall the tap. 

Then just disable the TAP adapter and Enable it again then reconnect.

 

[Flx11 10]

I've done as instructed with the .bat file, now there is a cmd window open and counting down from 300, with "press any key to continue...." do I need to leave that open? 

You can minimize it ....let it run in the background.

Yes you need that to stay open.

[Flx11 10]

As another choice would be to set DNS as static.......for the VPN tunnel.

-------------------------------------------------------------------------------------------------------

@ECHO OFF

:LOOP

timeout /t 60

@ECHO DISABLING IPV6/FLUSH DNS/DISABLE TCP TIMESTAMP(S)

netsh interface ip set address tapname DHCP

netsh int ip set dns name = "tapname" static 89.233.43.71(choose own DNS1)

netsh interface ip add dns name="tapname" 91.239.100.100(choose own DNS2) index=2

ipconfig /flushdns

ipconfig /all

@ECHO Waiting for 60...................... seconds...................................

GOTO LOOP

-----------------------------------------------------------------------------------------------------------------------

[trott3r 6]

"Waiting for 300 seconds....

Waiting for 283 seconds, press a key to continue ...
The filename, directory name, or volume label syntax is incorrect.


The filename, directory name, or volume label syntax is incorrect."

 

from "dhcp.tap.adapter.bat"

 

I ran the batch file from desktop as administrater.


The filename, directory name, or volume label syntax is incorrect."
 

[Flx11 10]

@trott3r

Have you changed the name of your TAP-adapter from "Local Area Network 2" to say "tap"? then modify the .bat file to 

-------------------------------------------------------------------------------------

@ECHO OFF

:LOOP

timeout /t 60

netsh interface ip set address tap DHCP

netsh int ip set dns name = "tap" source = dhcp

ipconfig /flushdns

ipconfig /all

@ECHO Waiting for 60...................... seconds...................................

GOTO LOOP

-------------------------------------------------------------------------------------

[Flx 76]

The filename, directory name, or volume label syntax is incorrect."

You will see this when the tap adapter does not exist or it is under a different name.

[Flx 76]

The batch script works in Windows 7/8/8.1/10 etc.

tap.zip

The new file uploaded is based on 4 tap adapters by the name quad/quad1/quad2/quad3....main connection named as lan.

Details:

This ensures 4 udp/tcp vpn connections keep-alive/and keep running...thx to the new introduced fancy Devices/Keys.

I run 4 UDP connections side by side.

Each connection has its own new key created under Devices/Keys.

You can modify the file any way you like according to your own configuration.

Regards and happy browsing,

Flx

[Flx 76]

Quote

connections side by side.

for each connection you will/may need to pick a different port 443/53/80/2018

[Flx 76]

for your torrent client an extra step will be needed

In Comodo Firewall-Rulesets block.lan.wifi.ipv6. BY mac and iP.

Example

1.

 

2.

The 2 "examples" that you see above either one will work just fine.

You can expand the list depending on your config/system.

Regards,

Flx

[LZ1 672]

OP do you think this would work for when:

 

OpenVPN > TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down . 2018.02.07 18:55:16 - OpenVPN > Route: Waiting for TUN/TAP interface to come up...

 

?

[Flx 76]

Yup....in Global Rules...add this at the top of your Rules already defined....image example

Quote

OP do you think this would work for when:

 

OpenVPN > TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down . 2018.02.07 18:55:16 - OpenVPN > Route: Waiting for TUN/TAP interface to come up...

where quad.mac is the mac address of your quad tap adapter found in Network Zones->quad.mac.

and where tap.mac or tapall.mac in Network Zones->tap.mac or tapall.mac zone which contains all your tap adapter mac addresses.

@LZ1 this should fix/resolve your problem.

Regards,

Flx

[Flx 76]

An update on the tap.bat Including IPV6 details etc.

Enjoy,

Flx

tap.ipv4.ipv6.bat.zip

[sh4rp87 0]

Don't know if it helps... but I'm using this .bat on my connection with lot of disconnects and client/TAP adapters hangs with great success

Replace VPN with the name of your TAP inteface

 

This is the script that runs on VPN down

 

@echo off
netsh interface set interface VPN admin=disable
timeout /t 2 /nobreak
netsh interface set interface VPN admin=enable
timeout /t 2 /nobreak
taskkill /IM AirVpn.exe /F
taskkill /IM openvpn.exe /F
timeout /t 5 /nobreak
start "" "C:\Program Files\AirVPN\AirVPN.exe" & exit
 

[Flx 76]

but I'm using this .bat on my connection with lot of disconnects

Your connection client to the AirVPN server just drops and tries to do a reconnect....in Eddie?

@echo off

netsh interface set interface VPN admin=disable

timeout /t 2 /nobreak

netsh interface set interface VPN admin=enable

 

netsh interface ip set address VPN DHCP

netsh int ip set dns name = "VPN" source = dhcp

timeout /t 2 /nobreak

taskkill /IM AirVpn.exe /F

taskkill /IM openvpn.exe /F

timeout /t 5 /nobreak

start "" "C:\Program Files\AirVPN\AirVPN.exe" & exit

Just make sure that VPN/TAP adapter is in DHCP mode.(See above)

Edited ... by Flx

[Flx 76]

Hello,

you may also consider this as an extra partial choice:

----------------------------------------------------------------------------------------------
netsh int tcp set global timestamps=disabled
netsh interface ipv6 set privacy state=disable
netsh interface ipv6 6to4 set state state=disabled
netsh interface ipv6 isatap set state state=disabled
netsh interface ipv6 set teredo disabled

-----------------------------------------------------------------------------------------------

Regards,

Flx

[Flx 76]

Windows 10 breaking the tap adapter:

1.If you have Comodo A/V Firewall and Windows OS as your config...turn WIndows Firewall OFF.

Windows Defender can run side by side with Comodo.(Your choice)

2.Before/After you manage to connect to an AirVPN server.

Use one of the scripts provided to fix this TAP issue.

You can use Eddie app or native OpenVPN(2 or more connections/sessions).

The batch scripts do exactly that(e.g. Prevent WIndows to break the VPN connection/tap adapter)

3.Disable in gpedit.msc anything you do not need (Store/maps/Telemetry etc)

4.Comodo-Rules.Set a local rule...

Block/Prevent any app/wermgr.exe/System/WIndows Operating System process to send data to (e.g. Microsoft) for port 80/443/ etc.

5.In Network Zone-->>Blocked Zones---->Block the default gateway(e.g. xxx.xxx.2.1) from main adapter before/after you connect.
6.Set a master password in/for Comodo. Only the person that knows the password set will be able to do any actual changes (e.g. Disable the Firewall etc.)

Regards,

Flx

[Flx 76]

For any other application that you run on your system/network such as Serviio/Smart View or similar...use the provided example below....if you don't like it not my problem..find your own "solution"

[Flx11 10]

FOR------------svchost.exe----------------

where svc.block contains the blocked ports 80/443/others

---------------------------------------------------

SET dllhost.exe/dashost.exe/explorer.exe/etc. as local (above example how to do so)

 

Comodo Global Rules https://airvpn.org/topic/3405-windows-comodo-prevent-leaks/ is only the minimum/beginner needed.

Regards,

Flex

 

 

[Flx 76]

SET dllhost.exe/dashost.exe/explorer.exe/etc. as local
https://airvpn.org/index.php?app=core&module=attach&section=attach&attach_rel_module=post&attach_id=26140

[Flx 76]

Good stuff. Maybe you should change to title to include the word "Guide" somewhere, to make it more clear for people.

@LZ1 Thx for the suggestion.

@Staff Thank you for topic name change.

[Flx 76]

for openvpn.exe and openvpn-gui.exe----image example--

instead of "Outgoing Only" option.

to make "2 3 4 VPN Connections Side-by-Side" to your main adapter(IP address xxx.xxx.2.153).

Enjoy & Regards,

Flx