Why can't connect?

manuel19

Hi!
I have problem connecting a second location to MAIN server.. this is what is happening.

I have a OPENVPNSERVER in a Datacenter (Colocation)

I have 2 CPU already configured as OPENVPNCLIENT connectng to the server.

I put the first CPU client in the LOCATION#1, it connect and pass traffic,etc,etc... FINE.

Then i put the second CPU client in the LOCATION#2, it try to connect but always says something like... "Connection refused... tryng in 10 secs...."

I don't know why... :S

The OPENVPNSERVER is working on port 80 (http) so the location#2 allow internet connection (browsing...) but there is a firewall in the middle. So, i was wondering: Why it says something like... "Connection refused... tryng in 10 secs...." ???? I'm using port 80 (Is open) because clients can browse on the internet....

So, that make me very confused because... i'm using port 80. That port is open.
How do i know it? Because every PC in location #2 can surf on internet....

So, i procced to connect the CPU Client directly to thr router Cisco. In this way I'm avoiding firewall.

But it keep saying the same thing, like...."Connection refused... tryng in 10 secs...."

How to fix that? (I'm not using duplicate certificates)

maikcat

can you please post configs first?

Michael.

manuel19

Ok, no problem. This are the configs:

MAIN SERVER

dev tap
ifconfig 172.16.2.1 255.255.255.0

tls-server

dh dh1024.pem

ca ca.crt
cert server.crt
key server.key

port 80
--proto tcp-server
verb 3

persist-tun
persist-key
comp-lzo

--script-security 2

keepalive 10 30
status openvpn-status.log

LOCATION #1

dev tap

float
remote 1.2.3.4

ifconfig 172.16.2.2 255.255.255.0

tls-client

ns-cert-type server

ca ca.crt

cert location1.crt

key location1.key

port 80

--proto tcp-client

user nobody
group nobody

persist-key
persist-tun

#ping 15

verb 3
comp-lzo

keepalive 10 30
--connect-retry 10

LOCATION #2

dev tap

float
remote 1.2.3.4

ifconfig 172.16.2.3 255.255.255.0

tls-client

ns-cert-type server

ca ca.crt

cert location2.crt

key location2.key

port 80

--proto tcp-client

user nobody
group nobody

persist-key
persist-tun

#ping 15

verb 3
comp-lzo

keepalive 10 30
--connect-retry 10

Please, help me

maikcat

please read the docs about server directive..

Michael.