zlotyx
I have openvpn server on openwrt.
server config
port 1194
proto udp
dev tap0
keepalive 10 120
status /tmp/openvpn-status.log
verb 3
secret /etc/openvpn/secret.key
client config (windows 7 64bit)
dev tap
proto udp
remote xx.xx.xx.xx 11xx
resolv-retry infinite
nobind
mute-replay-warnings
secret "c:\\Program Files (x86)\\OpenVPN\\config\\secret.key"
verb 3
float
client log
Mon Jul 23 22:28:25 2012 OpenVPN 2.2.1 Win32-MSVC++ [SSL] [LZO2] built on Jul 1 2011
Mon Jul 23 22:28:25 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jul 23 22:28:25 2012 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 23 22:28:25 2012 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 23 22:28:25 2012 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 23 22:28:25 2012 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 23 22:28:25 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jul 23 22:28:25 2012 TAP-WIN32 device [Połączenie lokalne 2] opened: \\.\Global\{2647A042-E313-40FE-A728-7039DBF9AA62}.tap
Mon Jul 23 22:28:25 2012 TAP-Win32 Driver Version 9.8
Mon Jul 23 22:28:25 2012 TAP-Win32 MTU=1500
Mon Jul 23 22:28:25 2012 NOTE: FlushIpNetTable failed on interface [15] {2647A042-E313-40FE-A728-7039DBF9AA62} (status=5) : Odmowa dostępu.
Mon Jul 23 22:28:25 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:4 ET:32 EL:0 ]
Mon Jul 23 22:28:25 2012 Local Options hash (VER=V4): '8b888ddc'
Mon Jul 23 22:28:25 2012 Expected Remote Options hash (VER=V4): '8b888ddc'
Mon Jul 23 22:28:25 2012 UDPv4 link local: [undef]
Mon Jul 23 22:28:25 2012 UDPv4 link remote: xx.xx.xx.xx:11xx
Mon Jul 23 22:28:35 2012 Peer Connection Initiated with xx.xx.xx.xx:11xx
Mon Jul 23 22:28:41 2012 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
Mon Jul 23 22:28:41 2012 Initialization Sequence Completed
iptables -L from openwrt
Chain zone_wan (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT tcp -- static.0.0.xx.xx.clients.your-server.de/16 anywhere tcp dpt:600xx
ACCEPT udp -- anywhere anywhere udp dpt:openvpn
ACCEPT tcp -- 194.xx.0.0/16 anywhere tcp dpt:600xx
ACCEPT tcp -- 188.xx.0.0/16 anywhere tcp dpt:600xx
ACCEPT tcp -- 194.xx.0.0/16 anywhere tcp dpt:www
ACCEPT tcp -- 83.xx.5.0/24 anywhere
ACCEPT udp -- anywhere anywhere udp dpt:bootpc
input_wan all -- anywhere anywhere
zone_wan_REJECT all -- anywhere anywhere
I can open connection, but I can only ping openvpn server, I cant acces any other computer in network.
Whats is wrong??
Please help.
Best regarfs
Robert
