alwaysotg
So I am trying to set up my first openvpn server. I am having trouble with it and searched for answers, but still have issues. Listed below is my server.conf and my client.opvn . The error I get is :
Fri Aug 17 16:38:06 2012 UDPv4 link local: [undef]
Fri Aug 17 16:38:06 2012 UDPv4 link remote: 24.159.249.50:1194
Fri Aug 17 16:39:06 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Aug 17 16:39:06 2012 TLS Error: TLS handshake failed
Fri Aug 17 16:39:06 2012 TCP/UDP: Closing socket
I already did port forwarding on both routers on client and server side.
### Client configuration file for OpenVPN
# Specify that this is a client
client
# Bridge device setting
dev tap
# Host name and port for the server (default port is 1194)
# note: replace with the correct values your server set up
remote 24.159.249.50 1194
# Client does not need to bind to a specific local port
nobind
# Keep trying to resolve the host name of OpenVPN server.
## The windows GUI seems to dislike the following rule.
##You may need to comment it out.
resolv-retry infinite
# Preserve state across restarts
persist-key
persist-tun
# SSL/TLS parameters - files created previously
ca ca.crt
cert client.crt
key client.key
# Since we specified the tls-auth for server, we need it for the client
# note: 0 = server, 1 = client
tls-auth ta.key 1
# Specify same cipher as server
cipher BF-CBC
# Use compression
comp-lzo
# Log verbosity (to help if there are problems)
verb 3
---------------
mode server
tls-server
local 192.168.2.4 ## ip/hostname of server
port 1194 ## default openvpn port
proto udp
#bridging directive
dev tap0
## If you need multiple tap devices, add them here
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"
persist-key
persist-tun
#certificates and encryption
ca ca.crt
cert server.crt
key server.key
# This file should be kept secret
dh dh1024.pem
tls-auth ta.key 0 # This file is secret
cipher BF-CBC
# Blowfish (default)
comp-lzo
#DHCP Information
ifconfig-pool-persist ipp.txt
server-bridge 192.168.2.10 255.255.255.0 192.168.1.100 192.168.2.110
push "dhcp-option DNS your.dns.ip.here"
push "dhcp-option DOMAIN yourdomain.com"
max-clients 10 ## set this to the max number of clients that should be connected at a time
#log and security
user nobody
group nogroup
keepalive 10 120
status openvpn-status.log
verb 3
I would appreciate any ideas or helps, let me know if any other info is needed
