Using OpenVPN server feature on a NAS I have

riahc3

Hello

I have a QNAP TS469URP NAS and it has a feature to act as a OpenVPN server. I have enabled it and configured it for 9411 and 10.8.0.2 - 10.8.0.254

The client establishes a connection to the server but it cannot ping it. The server cannot ping the client either.

Here are the configuration files:

Server config:

port 9411
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/myserver.crt
key /etc/openvpn/keys/myserver.key
auth-user-pass-verify /usr/sbin/vpn_check_account via-env
client-cert-not-required
username-as-common-name
no-name-remapping
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist /var/log/ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.100.29"
client-to-client
duplicate-cn
keepalive 10 60
reneg-sec 0
cipher AES-256-CBC
comp-lzo
max-clients 5
client-connect /etc/openvpn/connect.sh
client-disconnect /etc/openvpn/disconnect.sh
management localhost 7505
persist-key
persist-tun
status /var/log/openvpn-status.log
#log /tmp/openvpn.log
verb 3

Client config:

client
dev tun
proto udp
remote 192.168.100.87 9411
resolv-retry infinite
nobind
ca ca.crt
auth-user-pass
reneg-sec 0
cipher AES-256-CBC
comp-lzo

It uses username and password which is fine by me.

Why cant I see the VPN clients/server on each machine?

Thanks

riahc3

Server (/var/log/openvpn-status.log):

OpenVPN CLIENT LIST
Updated,Wed Sep 25 16:58:39 2013
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
admin,192.168.100.73:55109,79464,79733,Wed Sep 25 13:48:59 2013
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.10,admin,192.168.100.73:55109,Wed Sep 25 13:49:09 2013
GLOBAL STATS
Max bcast/mcast queue length,0
END

Client:

Wed Sep 25 13:48:31 2013 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Wed Sep 25 13:48:35 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Sep 25 13:48:35 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Sep 25 13:48:36 2013 LZO compression initialized
Wed Sep 25 13:48:36 2013 UDPv4 link local: [undef]
Wed Sep 25 13:48:36 2013 UDPv4 link remote: 192.168.100.87:9411
Wed Sep 25 13:48:36 2013 [TS_Series_NAS] Peer Connection Initiated with 192.168.100.87:9411
Wed Sep 25 13:48:46 2013 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.9)
Wed Sep 25 13:48:46 2013 TAP-WIN32 device [Conexion VPN] opened: \\.\Global\{A6E3775C-FD89-428D-828B-BD4F4635C3EC}.tap
Wed Sep 25 13:48:46 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {A6E3775C-FD89-428D-828B-BD4F4635C3EC} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Wed Sep 25 13:48:46 2013 Successful ARP Flush on interface [13] {A6E3775C-FD89-428D-828B-BD4F4635C3EC}
Wed Sep 25 13:48:46 2013 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.9)
Wed Sep 25 13:48:47 2013 ROUTE: route addition failed using CreateIpForwardEntry: Uno o más argumentos son incorrectos. [if_index=11]
Wed Sep 25 13:48:47 2013 ROUTE: route addition failed using CreateIpForwardEntry: Uno o más argumentos son incorrectos. [if_index=13]
Wed Sep 25 13:48:47 2013 ROUTE: route addition failed using CreateIpForwardEntry: Uno o más argumentos son incorrectos. [if_index=13]
Wed Sep 25 13:48:47 2013 ROUTE: route addition failed using CreateIpForwardEntry: Uno o más argumentos son incorrectos. [if_index=13]
Wed Sep 25 13:48:47 2013 Initialization Sequence Completed

riahc3

debbie10t wroteok .. so now try finding the server log.
it will be appended to you /var/log/syslog file with you current config.

if you change this directive:

Server config:

#log /tmp/openvpn.log

To:

log /etc/openvpn/ovpnserv.log

It will be /etc/openvpn/ovpnserv.log

Your previous post only showed the status file.

For some reason my NAS when I restart the OpenVPN service, rewrites whatever I put in the configuration with its own settings. I tried what you said and still commented out...