I am new to DD-WRT and am trying to get OpenVPN setup on my Buffalo WHR-HP-G54. I flashed the router with
http://www.dd-wrt.com/routerdb/de/download/Buffalo/WHR-HP-G54/-/dd-wrt.v24_vpn_generic.bin/3753 and have tried following several guides with different recommendations, but can't get any of them to work.
I'm using OpenVPN 2.2.2 on a Win7 X64 laptop and this is the latest error I get.
Mon May 07 15:58:58 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Mon May 07 15:58:58 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 07 15:58:58 2012 LZO compression initialized
Mon May 07 15:58:58 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon May 07 15:58:58 2012 Socket Buffers: R=[8192->8192] S=[64512->64512]
Mon May 07 15:58:58 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon May 07 15:58:58 2012 Local Options hash (VER=V4): '31fdf004'
Mon May 07 15:58:58 2012 Expected Remote Options hash (VER=V4): '3e6d1056'
Mon May 07 15:58:58 2012 Attempting to establish TCP connection with 50.73.76.137:1194
Mon May 07 15:58:59 2012 TCP: connect to 50.73.76.137:1194 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Here is my current setup:
Lan IP for Router
192.168.101.1
255.255.255.0
OpenVPN Config
server-bridge 192.168.101.1 255.255.255.0 192.168.101.50 192.168.101.75
management localhost 5001
comp-lzo
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 75.75.75.75"
push "dhcp-option DNS 192.168.101.1"
push "persist-tun"
push "persist-key"
port 1194
cipher BF-CBC
dev tap0
proto tcp-server
keepalive 10 60
max-clients 3
duplicate-cn
client-to-client
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
Startup Commands
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
Firewall
iptables -I INPUT -p tcp --dport 1194 -j ACCEPT
Client Config
ca "C:\\Program Files (X86)\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files (X86)\\OpenVPN\\easy-rsa\\keys\\client1.crt"
key "C:\\Program Files (X86)\\OpenVPN\\easy-rsa\\keys\\client1.key"
up-delay
tls-client
dev tap
proto tcp-client
remote myhostname.com 1194
ns-cert-type server
cipher BF-CBC
comp-lzo
verb 3
float
nobind
pull
redirect-gateway def1
I have tried opening ports on the Windows firewall as well as putting the client directly on the internet with no hardware firewall or router in front and I still can't get it to work.
Also, I kept getting an error when creating the certs that said "unable to write random state", but it created the certs anyway so I'm not sure if that could be the issue?
Any help would be greatly appreciated.
Thanks,
