Dear,
I'm a big noob at this, so please be patient.
I don't have access to the host, so I can only change de client-config.
The server/host side does work because I have done this before on my winsows-machine and here everything works fine.
This is my Client-configfile:
client.conf:
remote vpn0.lcrtele.com 1194
client
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca vpn0.pem
comp-lzo
user nobody
group nobody
pull dhcp-options
--auth-user-pass
I try to start the session with teh following command:
openvpn client.conf
(Here I enter my username an password)
This is the prompt-output:
Mon May 13 10:25:44 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon May 13 10:25:44 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 13 10:25:44 2013 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon May 13 10:25:44 2013 UDPv4 link local: [undef]
Mon May 13 10:25:44 2013 UDPv4 link remote: [AF_INET]46.28.44.10:1194
Mon May 13 10:25:44 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon May 13 10:25:45 2013 WARNING: 'dev-type' is used inconsistently, local='dev-type tun', remote='dev-type tap'
Mon May 13 10:25:45 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Mon May 13 10:25:45 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Mon May 13 10:25:45 2013 [127.0.0.1] Peer Connection Initiated with [AF_INET]46.28.44.10:1194
Mon May 13 10:25:47 2013 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Mon May 13 10:25:47 2013 TUN/TAP device tun0 opened
Mon May 13 10:25:47 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon May 13 10:25:47 2013 /sbin/ip link set dev tun0 up mtu 1500
Mon May 13 10:25:47 2013 /sbin/ip addr add dev tun0 local 10.0.1.129 peer 255.255.255.0
RTNETLINK answers: Network is unreachable
Mon May 13 10:25:47 2013 ERROR: Linux route add command failed: external program exited with error status: 2
RTNETLINK answers: Network is unreachable
Mon May 13 10:25:47 2013 ERROR: Linux route add command failed: external program exited with error status: 2
Mon May 13 10:25:47 2013 GID set to nobody
Mon May 13 10:25:47 2013 UID set to nobody
Mon May 13 10:25:47 2013 Initialization Sequence Completed
Mon May 13 10:39:06 2013 event_wait : Interrupted system call (code=4)
Mon May 13 10:39:06 2013 /sbin/ip addr del dev tun0 local 10.0.1.129 peer 255.255.255.0
RTNETLINK answers: Operation not permitted
Mon May 13 10:39:06 2013 Linux ip addr del failed: external program exited with error status: 2
Mon May 13 10:39:06 2013 SIGINT[hard,] received, process exiting
[root@localhost openvpn]# openvpn client.conf
Mon May 13 10:40:49 2013 OpenVPN 2.3.1 i386-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on May 6 2013
Enter Auth Username:jan
Enter Auth Password:
Mon May 13 10:40:56 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon May 13 10:40:56 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 13 10:40:56 2013 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon May 13 10:40:56 2013 UDPv4 link local: [undef]
Mon May 13 10:40:56 2013 UDPv4 link remote: [AF_INET]46.28.44.10:1194
Mon May 13 10:40:56 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon May 13 10:40:56 2013 WARNING: 'dev-type' is used inconsistently, local='dev-type tun', remote='dev-type tap'
Mon May 13 10:40:56 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1574'
Mon May 13 10:40:56 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Mon May 13 10:40:56 2013 [127.0.0.1] Peer Connection Initiated with [AF_INET]46.28.44.10:1194
Mon May 13 10:40:59 2013 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Mon May 13 10:40:59 2013 TUN/TAP device tun0 opened
Mon May 13 10:40:59 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon May 13 10:40:59 2013 /sbin/ip link set dev tun0 up mtu 1500
Mon May 13 10:40:59 2013 /sbin/ip addr add dev tun0 local 10.0.1.129 peer 255.255.255.0
RTNETLINK answers: Network is unreachable
Mon May 13 10:40:59 2013 ERROR: Linux route add command failed: external program exited with error status: 2
RTNETLINK answers: Network is unreachable
Mon May 13 10:40:59 2013 ERROR: Linux route add command failed: external program exited with error status: 2
Mon May 13 10:40:59 2013 GID set to nobody
Mon May 13 10:40:59 2013 UID set to nobody
Mon May 13 10:40:59 2013 Initialization Sequence Completed
Then when I do ifconfig it seems that I do receive an IP from the other side.:
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.0.1.129 P-t-P:255.255.255.0 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
But when I try to ping to other machines in that network, it doesn't work.
Can anybody help me or give me tips?
kind regards,
Tim
