I think I am in the right place in the forum- apologies if i am not
I have a Synology NAS running OpenVPN at different remote locations and one works like a champ with the below configuration (real IP was removed)
dev tun
tls-client
remote xx.xxx.xx.xxx 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
proto udp
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass
It works on one site but not the other (with the repspective IP changed of course). Configuration on the VPN Server side is limited on Synology and is the same on both boxes (put in IP range and enable)
The network configuration at the site that does not work looks like this
INTERNET-----------SMC Comcast Box-----/30------LINKSYS Router----LAN/24---------DLINK SWITCH--------------SYNOLOGY NAS
I have port forwarding on the Linksys Router (both directions) for port 1194. The cable box config is unknown as I can not get into it
When I connect from internet ( The IP on the right side of the Cable box) I get
Tue Aug 06 20:51:03 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 06 20:51:03 2013 TLS Error: TLS handshake failed
Tue Aug 06 20:51:03 2013 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 06 20:51:05 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Aug 06 20:51:05 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Tue Aug 06 20:51:05 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Aug 06 20:51:05 2013 LZO compression initialized
Tue Aug 06 20:51:05 2013 UDPv4 link local (bound): [undef]:1194
Tue Aug 06 20:51:05 2013 UDPv4 link remote: 24.178.98.193:1194
Tue Aug 06 20:52:05 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 06 20:52:05 2013 TLS Error: TLS handshake failed
Tue Aug 06 20:52:05 2013 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 06 20:52:07 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Aug 06 20:52:07 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Tue Aug 06 20:52:07 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Aug 06 20:52:07 2013 LZO compression initialized
Tue Aug 06 20:52:07 2013 UDPv4 link local (bound): [undef]:1194
Tue Aug 06 20:52:07 2013 UDPv4 link remote: 24.178.98.193:1194
So i figure Ok maybe the cable SMC box is a router and blocking port 1194. So I get on the LAN/24 network and set the IP on the client side directly to the Synology box (I cna access the GUI and ping it)- so to remove the Cable box and the router, I get:
Tue Aug 06 18:39:08 2013 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 06 18:39:10 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Aug 06 18:39:10 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Tue Aug 06 18:39:10 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Aug 06 18:39:10 2013 LZO compression initialized
Tue Aug 06 18:39:10 2013 UDPv4 link local (bound): [undef]:1194
Tue Aug 06 18:39:10 2013 UDPv4 link remote: 10.0.1.123:1194
Tue Aug 06 18:39:10 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:10 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:11 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:11 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:12 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:12 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:12 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_ACK_V1)
Tue Aug 06 18:39:13 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:13 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:14 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:14 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:15 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:15 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:16 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:16 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_ACK_V1)
Tue Aug 06 18:39:17 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:20 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:21 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:22 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:22 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:23 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:23 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:24 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:24 2013 TLS Error: Unroutable control packet received from 10.0.1.123:1194 (si=3 op=P_CONTROL_V1)
Tue Aug 06 18:39:35 2013 SIGTERM[hard,] received, process exiting
What am I missing here?- I googled the errors a bit and went to the
http://openvpn.net/howto.html#mitm site but before i go down that road- i am trying to understand why I cna not VPN when on the same LAn as Synology box
Thanks!
