Hi there, once I had a working server-bridge, which was awesome. Then my setup was update-destroyed; now I gave it another try, and it just won't work. here's my struggle to create a raspberrypi running OpenVPN to let me access my home network being anywhere. I used my mobile phone as a WiFi hotspot, connected my laptop and ran that as "client"; running arch. "server" is the raspberrypi running debian, behind router/firewall with a port forwarded accordingly. I censored as much as I could and tried to remain consistent as well. Due to enhanced clarity I decided to upload my textfiles to a folder on mediafire: http://www.mediafire.com/folder/iqavzhaq4r5f8/vpn-doc [b]What does work?[/b] [list][*] Starting the server. It's listening as expected. (see "server-log") [*] Establishing a connection using the client. Server reacts and assigns the expected IP. (see "client-log") [*] Creating and installing the corresponding TAP devices. (see "devices") [*] Altering the client-side routing table. As far as I think I can tell, it looks fine. (see "route-client")[/list] [b]What doesn't work?[/b] [list][*]Communication over the established connection. As clearly seen in "pinging", neither the server nor a box on my subnet can ping the client. Vice versa, the client can't ping anything on my subnet, while google.de works as expected.[/list] [b]Best guess?[/b] The "client-log" has some suspicious lines: [code]Tue Jul 23 23:10:52 2013 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #83 / time = (1374613843) Tue Jul 23 23:10:43 2013 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings {...} RTNETLINK answers: Invalid argument Tue Jul 23 23:10:55 2013 ERROR: Linux route add command failed: external program exited with error status: 2[/code] But they don't really help me to track down the problem/s :( I'll appreciate any help given, looking forward to any helpful reply! Best regards, LDericher

VPN on a raspberrypi

LDericher

Hi there,

once I had a working server-bridge, which was awesome. Then my setup was update-destroyed; now I gave it another try, and it just won't work.

here's my struggle to create a raspberrypi running OpenVPN to let me access my home network being anywhere. I used my mobile phone as a WiFi hotspot, connected my laptop and ran that as "client"; running arch. "server" is the raspberrypi running debian, behind router/firewall with a port forwarded accordingly. I censored as much as I could and tried to remain consistent as well.

Due to enhanced clarity I decided to upload my textfiles to a folder on mediafire: http://www.mediafire.com/folder/iqavzhaq4r5f8/vpn-doc

What does work?

Starting the server. It's listening as expected. (see "server-log")
Establishing a connection using the client. Server reacts and assigns the expected IP. (see "client-log")
Creating and installing the corresponding TAP devices. (see "devices")
Altering the client-side routing table. As far as I think I can tell, it looks fine. (see "route-client")

What doesn't work?

Communication over the established connection. As clearly seen in "pinging", neither the server nor a box on my subnet can ping the client. Vice versa, the client can't ping anything on my subnet, while google.de works as expected.

Best guess?
The "client-log" has some suspicious lines:

Tue Jul 23 23:10:52 2013 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #83 / time = (1374613843) Tue Jul 23 23:10:43 2013 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
{...}
RTNETLINK answers: Invalid argument
Tue Jul 23 23:10:55 2013 ERROR: Linux route add command failed: external program exited with error status: 2

But they don't really help me to track down the problem/s 🙁

I'll appreciate any help given, looking forward to any helpful reply!

Best regards,
LDericher

LDericher

Well, I feel dumb.
Problem out of OpenVPN scope; IP forwarding was not activated. Apparently, that made a difference 😉
It works now, so thanks nevertheless!

Regards, LDer