moravas
Hi People,
I'm very new to networking and VPN technologies, but i would like setting up an OpenVPN based VPN network.
I have a TP Link(TL1043ND) router with installed OpenWRT 10.03.1 and the necessary openvpn, openvpn-easy-rsa, luci-app-openvpn packages.
The goal is the VPN service on the WAN port.
I was configured the server and client, but the connection has timeout.
The server configuration in LuCi configuration format:
A server oldali config file, ahogy a LuCi megeszi:
config 'openvpn' 'openvpn_server'
option 'enable' '1'
option 'port' '1194'
option 'proto' 'udp'
option 'dev' 'tun'
option 'ca' '/etc/openvpn/ca.crt'
option 'cert' '/etc/openvpn/OpenVPNHomeServer.crt'
option 'key' '/etc/openvpn/OpenVPNHomeServer.key'
option 'dh' '/etc/openvpn/dh2048.pem'
option 'server' '10.8.0.0 255.255.255.0'
option 'keepalive' '10 120'
option 'persist_key' '1'
option 'persist_tun' '1'
option 'mute' '20'
option 'verb' '11'
option 'script_security' '2'
option 'client_to_client' '1'
list 'push' 'dhcp-option DNS 193.224.40.5'
list 'push' 'route 10.8.0.1 255.255.255.0'
option 'ifconfig' '10.8.0.1 255.255.255.0'
It create on startup a tun0 device with the following parameters (it is the output of ifconfig):
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
The first question is: the 255.255.255.255 subnet mask is correct in my case or not?
If I restart the service (/etc/init.d/openvpn restart) then I get the following system log
Feb 5 19:41:31 OpenWrt daemon.notice openvpn(openvpn_server)[5368]: 101 variation(s) on previous 20 message(s) suppressed by --mute
Feb 5 19:41:31 OpenWrt daemon.err openvpn(openvpn_server)[5368]: event_wait : Interrupted system call (code=4)
Feb 5 19:41:31 OpenWrt daemon.notice openvpn(openvpn_server)[5368]: TCP/UDP: Closing socket
Feb 5 19:41:31 OpenWrt daemon.notice openvpn(openvpn_server)[5368]: /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
Feb 5 19:41:31 OpenWrt daemon.notice openvpn(openvpn_server)[5368]: Closing TUN/TAP interface
Feb 5 19:41:31 OpenWrt daemon.notice openvpn(openvpn_server)[5368]: /sbin/ifconfig tun0 0.0.0.0
Feb 5 19:41:31 OpenWrt daemon.notice openvpn(openvpn_server)[5368]: SIGTERM[hard,] received, process exiting
Feb 5 19:41:36 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: OpenVPN 2.1.4 mips-openwrt-linux [SSL] [LZO2] [EPOLL] built on Nov 14 2011
Feb 5 19:41:36 OpenWrt daemon.warn openvpn(openvpn_server)[6819]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: Diffie-Hellman initialized with 2048 bit key
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: Socket Buffers: R=[114688->131072] S=[114688->131072]
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: TUN/TAP device tun0 opened
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: TUN/TAP TX queue length set to 100
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: UDPv4 link local (bound): [undef]:1194
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: UDPv4 link remote: [undef]
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: MULTI: multi_init called, r=256 v=256
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: IFCONFIG POOL: base=10.8.0.4 size=62
Feb 5 19:41:37 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: Initialization Sequence Completed
Feb 5 19:41:38 OpenWrt user.notice ifup: Enabling Router Solicitations on OpenVPNServer (tun0)
Feb 5 19:41:38 OpenWrt user.info firewall: removing OpenVPNServer (tun0) from zone vpn
Feb 5 19:41:38 OpenWrt user.info firewall: adding OpenVPNServer (tun0) to zone vpn
The client side has the following structure:
I have installed the network-manager-openvpn and its dependencis by Synaptic package manager and I made a new VPN connection with "network connections" icon on the taskbar.
The gateway 10.8.0.2
The type: CertificateTLS)
default port
MTU: 1500
MSS controll
If I would like connect to the new network then I get the following system log on server side, and the connection will be refused with time out.
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 32 variation(s) on previous 20 message(s) suppressed by --mute
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: MULTI: multi_create_instance called
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 Re-using SSL/TLS context
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 READ [14] from 192.168.240.32:46185: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=506cfa81 77fd2c1c [ ] pid=0 DATA
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 TLS: Initial packet from 192.168.240.32:46185, sid=506cfa81 77fd2c1c
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 WRITE [26] to 192.168.240.32:46185: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=59466772 4a6f0c4a [ 0 sid=506cfa81 77fd2c1c ] pid=0 DATA
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 write returned 26
Feb 5 19:50:07 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:08 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 0
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 0
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 WRITE [14] to 192.168.240.32:46185: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=59466772 4a6f0c4a [ ] pid=0 DATA
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 write returned 14
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: UDPv4 read returned -1
Feb 5 19:50:10 OpenWrt daemon.err openvpn(openvpn_server)[6819]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: UDPv4 read returned 14
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 READ [14] from 192.168.240.32:46185: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=506cfa81 77fd2c1c [ ] pid=0 DATA
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 WRITE [22] to 192.168.240.32:46185: P_ACK_V1 kid=0 sid=59466772 4a6f0c4a [ 0 sid=506cfa81 77fd2c1c ]
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: 192.168.240.32:46185 UDPv4 write returned 22
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: event_wait returned 1
Feb 5 19:50:10 OpenWrt daemon.notice openvpn(openvpn_server)[6819]: UDPv4 read returned -1
Feb 5 19:50:10 OpenWrt daemon.err openvpn(openvpn_server)[6819]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Can somebody help me?
Thank you
Regards,
moravas
