UDPv4 link local (bound): [undef]:1194

Maker man

UDPv4 link local (bound): [undef]:1194
UDPv4 link remote: [undef]

What is wrong, did i set good port forwarding on my router or not? My router is thomson 782i.
What is undefined?

Here is the rest------server------------------------------------------------------

Thu Jan 27 17:57:17 2011 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Jan 27 17:57:17 2011 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Jan 27 17:57:17 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 27 17:57:17 2011 Diffie-Hellman initialized with 1024 bit key
Thu Jan 27 17:57:17 2011 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 27 17:57:17 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jan 27 17:57:17 2011 ROUTE default_gateway=192.168.1.1
Thu Jan 27 17:57:17 2011 TAP-WIN32 device [Connessione alla rete locale (LAN) 3] opened: \\.\Global\{570DB92F-663F-4F54-A9AA-F0421FEB6087}.tap
Thu Jan 27 17:57:17 2011 TAP-Win32 Driver Version 9.9
Thu Jan 27 17:57:17 2011 TAP-Win32 MTU=1500
Thu Jan 27 17:57:17 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {570DB92F-663F-4F54-A9AA-F0421FEB6087} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Thu Jan 27 17:57:17 2011 Sleeping for 10 seconds...
Thu Jan 27 17:57:27 2011 NOTE: FlushIpNetTable failed on interface [3] {570DB92F-663F-4F54-A9AA-F0421FEB6087} (status=259) : Dati disponibili esauriti.
Thu Jan 27 17:57:27 2011 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Thu Jan 27 17:57:27 2011 Route addition via IPAPI succeeded [adaptive]
Thu Jan 27 17:57:27 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jan 27 17:57:27 2011 UDPv4 link local (bound): [undef]:1194
Thu Jan 27 17:57:27 2011 UDPv4 link remote: [undef]
Thu Jan 27 17:57:27 2011 MULTI: multi_init called, r=256 v=256
Thu Jan 27 17:57:27 2011 IFCONFIG POOL: base=10.8.0.4 size=62
Thu Jan 27 17:57:27 2011 IFCONFIG POOL LIST
Thu Jan 27 17:57:27 2011 Initialization Sequence Completed
--------------server-------------------------------------------------------------------
--------------klijent------------------------------------------------------------------
Wed May 16 17:59:08 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed May 16 17:59:08 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 17:59:09 2012 LZO compression initialized
Wed May 16 17:59:09 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 17:59:09 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 17:59:09 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 17:59:09 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 17:59:09 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 17:59:09 2012 UDPv4 link local: [undef]
Wed May 16 17:59:09 2012 UDPv4 link remote: 93.137.121.151:1194
-------------------------------klijent----------------------------------------

I would underline this three:
Wed May 16 17:59:09 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 17:59:09 2012 UDPv4 link local: [undef]
Wed May 16 17:59:09 2012 UDPv4 link remote: 93.137.121.151:1194
-> I just dont get it, where is the problem? Did I set this port forwarding wrong (in my router)?

Please it is bloody urgent! Can someone help?

maikcat

you are using windows as your server,

is there any firewall enabled on them?

please post configs also.

Michael.

Maker man

Ok now, i have successed, but (there is always one but)!
I am connected, and the problem was in router to be exact in port forwarding.
I moved my server to other building where I have a normal router, in which I have managed to set port forwarding as God commands. I did know how to cofigure port forwarding on router thomson tg782i!

Now, the question is, I dont see any files which I have shared on computers, why?

-To Michel, yes I am using Windows XP for server. I can even ping them, yes.
The firewall is down, on all computers (server + 2 clients)
What do I have to do, so that I could pull some files over vpn net?
I can I send messages over cmd (net send) ??

My configuration is basic one, nothing special. I think it is all good!

maikcat

Now, the question is, I dont see any files which I have shared on computers, why?

what exactly do you mean?
how you can try to "see" files on shared computers?

What do I have to do, so that I could pull some files over vpn net?
I can I send messages over cmd (net send) ??

My configuration is basic one, nothing special. I think it is all good!

openvpn works at layer 2/3 (depends of your setup) to transfer files you need higher
protocol (smb/ftp/ssh etc) its up to you which one you will use to copy files..

Michael.

Maker man

Ok, I will explain myself.

I thought(but now I am aware of that things work different) that when I put up OpenVPN network, that I just need to share partions(or folders) so that I could access on other computer and take files in copy/paste way, like in normal LAN networks. I understood it literaly that when you put up vpn network that all works like LAN network.
----------------------Client-------------------------
client
dev tun
proto udp
remote rissl.zapto.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Programmi\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Programmi\\OpenVPN\\easy-rsa\\keys\\outsorce1.crt"
key "C:\\Programmi\\OpenVPN\\easy-rsa\\keys\\outsorce1.key"
ns-cert-type server
comp-lzo
verb 3
explicit-exit-notify 2
ping 10
ping-restart 60
route-method exe
route-delay 2
-------------------------Client--------------------------
-------------------------Server-------------------------
port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt" #Po potrebi promijeniti putanje!!!!
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key" # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem" #Po potrebi promijeniti putanju!!!!
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
-------------------------Server-------------------------

Maker man

Continuing last post...

I put the config files of server and client on the last post( you asked me before to put it on), they are sample config files, nothing special about it.
But my question is:
When I had put on openvpn network on line and it works properly, how can i take data from one computer and put it on other one?

maikcat wrote
openvpn works at layer 2/3 (depends of your setup) to transfer files you need higher
protocol (smb/ftp/ssh etc) its up to you which one you will use to copy files..

But how it is done? Are these some applications (which I have to install) or how it is done?
How do I configure openvpn to make it possible to transfer files?

maikcat

that I could access on other computer and take files in copy/paste way, like in normal LAN networks

yes you can do that,

openvpn works (in your case) on layer 3 thats BELOW smb/cifs protocol,
that means you CAN use windows copy paste functionality..

what exactly is your problem?what is NOT working?
can you ping hosts via vpn tunnel?

one thing which might not work is name resolving,i mean if you use computer names
to access resources via vpn ,you might have a problem there which can be solved using wins/dns/hosts

try access other pcs using their ip (fe net view \\192.16.x.x)

Michael.

Maker man

I can ping them over vpn tunnel (ping 10.8.0.x)

When I open My network places I don't see nothing(shared partiotions,folders),
so I cann't take data from other computer.

one thing which might not work is name resolving,i mean if you use computer names
to access resources via vpn ,you might have a problem there which can be solved using wins/dns/hosts

I don't know how to do that.

try access other pcs using their ip (fe net view \\192.16.x.x)

How it is done?
I need to find out which is their IP address; this I can find out from cmd (ipconfig /all or)?
And put it in address bar in Internet Explorer?

maikcat

name resolving problems are beyond openvpn so i will try to briefly help you.

if you have server OS inside your lan you can start WINS service on it
and configure other pcs to register there.

hosts file is an alternative to wins but its simply a static file (check windows\system32\drivers\etc\hosts.sam file)
.sam is for SAMPLE ,edit it and RENAME it to hosts (without extention)

yes to edit hosts you must know ips for which pcs you want to access,WINS in the other hand is dynamic.

And put it in address bar in Internet Explorer?

no,simply go start-->run and type \\192.168.x.x (ip of target pc) and press enter

again please search the web to find out more on wins etc...

Michael.

Maker man

Okej, I am putting on line my network so still I didn't try what you told me to do with WINS.
But I have a question. I have add IP address of my computer in WINS.
I need to do it on Virtual tap driver, right?
And there(on my computer) I need to add other IP address of computers witch are connected in network? That is WINS?
I am asking because it looks very simple to be truth..

I have another question, when you create clients, can you give to client name in which is a dot(.)?
And can I connect to server(XP) from win 7 ?

Maker man

Fri Jun 29 17:32:24 2012 MULTI: multi_create_instance called
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 Re-using SSL/TLS context
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 LZO compression initialized
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 Local Options hash (VER=V4): '530fdded'
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 Expected Remote Options hash (VER=V4): '41690919'
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 TLS: Initial packet from 93.137.61.62:64275, sid=9e12a21e 7270940d
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 VERIFY OK: depth=1, /C=HR/ST=PU/L=Pula/O=Zavrsni_rad_OpenVPN/OU=changeme/CN=veleriVPN/name=changeme/emailAddress=istjepan@veleri.hr
Fri Jun 29 17:32:24 2012 93.137.61.62:64275 VERIFY OK: depth=0, /C=HR/ST=PU/L=Pula/O=Zavrsni_rad_OpenVPN/OU=changeme/CN=Vanjska.tocka1/name=changeme/emailAddress=istjepan@veleri.hr
Fri Jun 29 17:32:25 2012 93.137.61.62:64275 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Jun 29 17:32:25 2012 93.137.61.62:64275 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jun 29 17:32:25 2012 93.137.61.62:64275 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Jun 29 17:32:25 2012 93.137.61.62:64275 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jun 29 17:32:25 2012 93.137.61.62:64275 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Jun 29 17:32:25 2012 93.137.61.62:64275 [Vanjska.tocka1] Peer Connection Initiated with 93.137.61.62:64275
Fri Jun 29 17:32:25 2012 Vanjska.tocka1/93.137.61.62:64275 MULTI: Learn: 10.8.0.6 -> Vanjska.tocka1/93.137.61.62:64275
Fri Jun 29 17:32:25 2012 Vanjska.tocka1/93.137.61.62:64275 MULTI: primary virtual IP for Vanjska.tocka1/93.137.61.62:64275: 10.8.0.6
Fri Jun 29 17:32:27 2012 Vanjska.tocka1/93.137.61.62:64275 PUSH: Received control message: 'PUSH_REQUEST'
Fri Jun 29 17:32:27 2012 Vanjska.tocka1/93.137.61.62:64275 SENT CONTROL [Vanjska.tocka1]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Fri Jun 29 17:32:27 2012 Vanjska.tocka1/93.137.61.62:64275 IPv6 in tun mode is not supported in OpenVPN 2.2

The case is:
The client can ping me(server) on ip address of my computer, but he can't ping me on ip address of openvpn.
I can't ping him at all.
We don't see shared partitions in My network places.
I put my and his ip address of computer(not of openvpn ip address) in WINS on my TAP (virtual adapter).
How does function this stuff with WINS? I just need to put ip addresses of computers here and that's it or is it something else?

Where is the problem?

Maker man

On other side there is this message on log:

2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 31.147.121.148 MASK 255.255.255.255 192.168.69.1
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 Initialization Sequence Completed

Where is the problem?

maikcat

2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 31.147.121.148 MASK 255.255.255.255 192.168.69.1
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
The requested operation requires elevation.
Fri Jun 29 18:33:37 2012 ERROR: Windows route add command failed: returned error code 1
Fri Jun 29 18:33:37 2012 Initialization Sequence Completed

if the above are from win 7,
did you run openvpn with admin rights?

Michael.

Maker man

Yes, exactly was that. But when my friend connects an me his computer goes mad and his internet starts to disconnect.
I can access other computer via address bar but I cant see him in my network places;
so can you explain to me how to set up WINS? -> do I input address in tap driver ? which address, address of my computer or of ovpn?

maikcat

--dhcp-option type [parm]
Set extended TAP-Win32 TCP/IP properties, must be used with --ip-win32 dynamic or --ip-win32 adaptive. This option can be used to set additional TCP/IP properties on the TAP-Win32 adapter, and is particularly useful for configuring an OpenVPN client to access a Samba server across the VPN.

DOMAIN name -- Set Connection-specific DNS Suffix.

DNS addr -- Set primary domain name server address. Repeat this option to set secondary DNS server addresses.

WINS addr -- Set primary WINS server address (NetBIOS over TCP/IP Name Server). Repeat this option to set secondary WINS server addresses.

you can push wins options to clients from the server...

Michael.

Maker man

Look man, I am new in this, maybe someone who is working long like you could understand what you had wrote but to me is like science fiction.
Can you explain in more simple words...?

maikcat

please add this to your server config:

push "dhcp-option WINS 1.2.3.4"

where 1.2.3.4 is the ip of your wins server.

Michael.

Maker man

Ok, thank you. It works.
My friends are offline so I need to try it concrete later today.
But now I can see shared partition, of my friend who's now offline, in My network places. It's a progress.

1.I have another problem. OpenVPN server is on computer which is directly connected on internet.
But, yesterday I had connect with computer which was in LAN with other 2 computers.
My friend from that computer which is situated in LAN could access my computer,
but I could not access his computer.
What do I have to do? or WINS will solve even this?
2.When I connect to a single computer it is working fine.

But in the both ways when people connect on server their internet blocks! They can just use ovpn.
How to fix that?

maikcat

1.I have another problem. OpenVPN server is on computer which is directly connected on internet.
But, yesterday I had connect with computer which was in LAN with other 2 computers.
My friend from that computer which is situated in LAN could access my computer,
but I could not access his computer.
What do I have to do? or WINS will solve even this?

if he has firewall enabled on tap interface he is blocking you out...

Michael.

Maker man

In the both cases the firewall is off. I asked him like 10 times. 🙂
They have Win 7 and server is XP.

But why does Internet block in both cases???