Server issues the same IP to all clients.

hendrik.witbooi

Hi everybody.

I posted this first in the DD-WRT forum here http://www.dd-wrt.com/phpBB2/viewtopic.php?p=775993 Because I thought it would be more relevant. But no luck...

Hopefully somebody here can help me, I really need it!

I followed this guide

http://www.dd-wrt.com/wiki/index.php/VPN_(the_easy_way)_v24%2B

To set up OpenVPN in bridged mode with my Linksys DD-WRT54g.

I have specified an IP pool of 192.168.0.50/55 my DHCP is 192.168.0.100/20 so there is no overlap.

It works just great for one client, and I have tested and it works on all the machines needed (3).

Where the problem comes in is if I want more than 1 client connected at once, the second connecting client gets the same IP (192.168.0.50).

The one that was connected first continues to work fine, access network resources etc.

The second can't. It doesn't even display a message letting me know there is an IP conflict.

I have tried modifying the properties of the tap interface of each client to assign a static IP, no dice, it is overwritten.

I really need to be able to have multiple clients connected simultaneously and have client-client communication.

My config files are basically the same as in the tutorial above, but here they are anyhow...

Server

mode server
proto udp 
port 1194 
dev tap0 
server-bridge 192.168.0.1 255.255.255.0 192.168.0.50 192.168.0.55 
 # Gateway (VPN Server)   Subnetmask   Start-IP   End-IP 
keepalive 10 120 
daemon 
verb 5 
client-to-client 
dh
ca
cert 
key

# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl

Client

remote XXXXXXXXXXX 1194

client 
dev tap1
proto udp 
resolv-retry infinite 
nobind 
persist-key 
persist-tun 
float 

ca
cert
key

#ns-cert-type server

Any help or suggestions are greatly appreciated!!

Thank you for taking the time to read...

hendrik.witbooi

Hi, Sorry for just jumping right in there. Thanks for getting back to me despite it!

Client1

Sat Oct 26 14:59:59 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Sat Oct 26 15:00:00 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Oct 26 15:00:00 2013 UDPv4 link local: [undef]
Sat Oct 26 15:00:00 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Sat Oct 26 15:00:02 2013 [2412460NET] Peer Connection Initiated with [AF_INET]192.168.0.1:1194
Sat Oct 26 15:00:04 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Oct 26 15:00:04 2013 open_tun, tt->ipv6=0
Sat Oct 26 15:00:04 2013 TAP-WIN32 device [RoutedVPN] opened: \\.\Global\{6A16B677-35A6-4DFD-88C3-116B7E3599DB}.tap
Sat Oct 26 15:00:04 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.0.50/255.255.255.0 on interface {6A16B677-35A6-4DFD-88C3-116B7E3599DB} [DHCP-serv: 192.168.0.0, lease-time: 31536000]
Sat Oct 26 15:00:04 2013 Successful ARP Flush on interface [5] {6A16B677-35A6-4DFD-88C3-116B7E3599DB}
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.0.1 p=0 i=3 t=4 pr=3 a=3623 h=0 m=25/-1/-1/-1/-1
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=198708 h=0 m=1/-1/-1/-1/-1
169.254.0.0 255.255.0.0 192.168.0.101 p=0 i=3 t=3 pr=3 a=3621 h=0 m=20/-1/-1/-1/-1
192.168.0.0 255.255.255.0 192.168.0.101 p=0 i=3 t=3 pr=2 a=3626 h=0 m=25/-1/-1/-1/-1
192.168.0.101 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=3626 h=0 m=25/-1/-1/-1/-1
192.168.0.255 255.255.255.255 192.168.0.101 p=0 i=3 t=3 pr=2 a=3626 h=0 m=25/-1/-1/-1/-1
224.0.0.0 240.0.0.0 192.168.0.101 p=0 i=3 t=3 pr=2 a=3626 h=0 m=25/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=5 t=3 pr=2 a=198708 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=393223 t=3 pr=2 a=6021 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=2 t=3 pr=2 a=198708 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=3 t=3 pr=2 a=198708 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=4 t=3 pr=2 a=198708 h=0 m=1/-1/-1/-1/-1
SYSTEM ADAPTER LIST
TAP-Windows Adapter V9 #2 - Packet Scheduler Miniport
  Index = 4
  GUID = {3592107B-96B7-424B-9436-9A5B4FB5E248}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:35:92:10:7b
  GATEWAY =  
  DNS SERV = 8.8.8.8 8.8.4.4 
TAP-Windows Adapter V9 - Packet Scheduler Miniport
  Index = 5
  GUID = {6A16B677-35A6-4DFD-88C3-116B7E3599DB}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:6a:16:b6:77
  GATEWAY =  
  DHCP SERV = 255.255.255.255 
  DHCP LEASE OBTAINED = Sat Oct 26 14:57:48 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV = 8.8.8.8 8.8.4.4 
Bluetooth LAN Access Server Driver - Packet Scheduler Miniport
  Index = 393223
  GUID = {95011281-89D1-45D3-BD18-7DE1B4A961EF}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:22:69:e4:6e:76
  GATEWAY =  
  DHCP SERV =  
  DHCP LEASE OBTAINED = Tue Jan 19 03:14:07 2038
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV =  
Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller - Packet Scheduler Miniport
  Index = 2
  GUID = {A71F2CCB-2CBB-44BF-B59F-12F33484B2DA}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:13:77:f2:e3:53
  GATEWAY =  
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Wed Sep 18 14:48:56 2013
  DHCP LEASE EXPIRES  = Thu Sep 19 14:48:56 2013
  DNS SERV =  
Atheros AR5007EG Wireless Network Adapter - Packet Scheduler Miniport
  Index = 3
  GUID = {009694AB-F071-41A2-86C0-84A7D39026E6}
  IP = 192.168.0.101/255.255.255.0 
  MAC = 00:24:2b:31:3d:40
  GATEWAY = 192.168.0.1/0.0.0.0 
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Sat Oct 26 14:00:13 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV = 192.168.0.1 
Sat Oct 26 15:00:39 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Sat Oct 26 15:00:50 2013 SIGTERM[hard,] received, process exiting

Client 2

Wed Oct 02 14:01:38 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jun  3 2013
Enter Management Password:
Wed Oct 02 14:01:38 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Oct 02 14:01:41 2013 UDPv4 link local: [undef]
Wed Oct 02 14:01:41 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Wed Oct 02 14:01:43 2013 [2412460NET] Peer Connection Initiated with [AF_INET]192.168.0.1:1194
Wed Oct 02 14:01:46 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Oct 02 14:01:46 2013 open_tun, tt->ipv6=0
Wed Oct 02 14:01:46 2013 TAP-WIN32 device [2412460VPN] opened: \\.\Global\{65B2D781-0354-4AC9-B65C-0E0BA0D7100E}.tap
Wed Oct 02 14:01:47 2013 NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 2412460VPN dhcp
Wed Oct 02 14:02:17 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.0.50/255.255.255.0 on interface {65B2D781-0354-4AC9-B65C-0E0BA0D7100E} [DHCP-serv: 192.168.0.0, lease-time: 31536000]
Wed Oct 02 14:02:17 2013 Successful ARP Flush on interface [7] {65B2D781-0354-4AC9-B65C-0E0BA0D7100E}
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.0.1 p=0 i=5 t=4 pr=3 a=190 h=0 m=25/-1/-1/-1/-1
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
192.168.0.0 255.255.255.0 192.168.0.100 p=0 i=5 t=3 pr=2 a=193 h=0 m=25/-1/-1/-1/-1
192.168.0.100 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=193 h=0 m=25/-1/-1/-1/-1
192.168.0.255 255.255.255.255 192.168.0.100 p=0 i=5 t=3 pr=2 a=193 h=0 m=25/-1/-1/-1/-1
192.168.136.0 255.255.255.0 192.168.136.1 p=0 i=2 t=3 pr=2 a=206 h=0 m=20/-1/-1/-1/-1
192.168.136.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=206 h=0 m=20/-1/-1/-1/-1
192.168.136.255 255.255.255.255 192.168.136.1 p=0 i=2 t=3 pr=2 a=206 h=0 m=20/-1/-1/-1/-1
192.168.157.0 255.255.255.0 192.168.157.1 p=0 i=3 t=3 pr=2 a=203 h=0 m=20/-1/-1/-1/-1
192.168.157.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=203 h=0 m=20/-1/-1/-1/-1
192.168.157.255 255.255.255.255 192.168.157.1 p=0 i=3 t=3 pr=2 a=203 h=0 m=20/-1/-1/-1/-1
224.0.0.0 240.0.0.0 192.168.0.100 p=0 i=5 t=3 pr=2 a=193 h=0 m=25/-1/-1/-1/-1
224.0.0.0 240.0.0.0 192.168.136.1 p=0 i=2 t=3 pr=2 a=206 h=0 m=20/-1/-1/-1/-1
224.0.0.0 240.0.0.0 192.168.157.1 p=0 i=3 t=3 pr=2 a=203 h=0 m=20/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.100 p=0 i=5 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.136.1 p=0 i=7 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.136.1 p=0 i=6 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.136.1 p=0 i=4 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.136.1 p=0 i=2 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.157.1 p=0 i=3 t=3 pr=2 a=289 h=0 m=1/-1/-1/-1/-1
SYSTEM ADAPTER LIST
TAP-Windows Adapter V9 #2 - Packet Scheduler Miniport
  Index = 6
  GUID = {B45A2527-7361-4880-B089-BC942AB8C52C}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:b4:5a:25:27
  GATEWAY =  
  DHCP SERV = 10.8.0.5 
  DHCP LEASE OBTAINED = Sat Sep 21 08:18:09 2013
  DHCP LEASE EXPIRES  = Sun Sep 21 08:18:09 2014
  DNS SERV =  
TAP-Windows Adapter V9 - Packet Scheduler Miniport
  Index = 7
  GUID = {65B2D781-0354-4AC9-B65C-0E0BA0D7100E}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:65:b2:d7:81
  GATEWAY =  
  DHCP SERV = 10.8.0.5 
  DHCP LEASE OBTAINED = Tue Oct 01 22:16:21 2013
  DHCP LEASE EXPIRES  = Wed Oct 01 22:16:21 2014
  DNS SERV = 8.8.8.8 8.8.4.4 
Atheros AR9285 Wireless Network Adapter - Packet Scheduler Miniport
  Index = 5
  GUID = {5EB9F7CB-4A1C-4FB4-BE7C-997D4841FA52}
  IP = 192.168.0.100/255.255.255.0 
  MAC = ec:55:f9:16:52:b7
  GATEWAY = 192.168.0.1/0.0.0.0 
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Wed Oct 02 13:59:38 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV = 192.168.0.1 
Marvell Yukon 88E8040 Family PCI-E Fast Ethernet Controller - Packet Scheduler Miniport
  Index = 4
  GUID = {4F9598B8-F9A2-4F1B-AE14-CFABD94D4E4A}
  IP = 0.0.0.0/0.0.0.0 
  MAC = e8:11:32:2c:ea:95
  GATEWAY =  
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Fri Sep 20 15:26:42 2013
  DHCP LEASE EXPIRES  = Sat Sep 21 15:26:42 2013
  DNS SERV =  
VMware Virtual Ethernet Adapter for VMnet1
  Index = 3
  GUID = {27722137-16B3-44E9-8F73-588EB51A87C3}
  IP = 192.168.157.1/255.255.255.0 
  MAC = 00:50:56:c0:00:01
  GATEWAY =  
  DHCP SERV = 192.168.157.254 
  DHCP LEASE OBTAINED = Wed Oct 02 13:59:28 2013
  DHCP LEASE EXPIRES  = Wed Oct 02 14:29:28 2013
  DNS SERV = 192.168.157.1 
VMware Virtual Ethernet Adapter for VMnet8
  Index = 2
  GUID = {F274DA2A-77EA-4FE6-8B17-E666DFA0EF9F}
  IP = 192.168.136.1/255.255.255.0 
  MAC = 00:50:56:c0:00:08
  GATEWAY =  
  DHCP SERV = 192.168.136.254 
  DHCP LEASE OBTAINED = Wed Oct 02 13:59:25 2013
  DHCP LEASE EXPIRES  = Wed Oct 02 14:29:25 2013
  PRI WINS = 192.168.136.2/0.0.0.0 
  SEC WINS = 0.0.0.0/0.0.0.0 
  DNS SERV = 192.168.136.2 
Wed Oct 02 14:02:52 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Wed Oct 02 14:05:22 2013 [2412460NET] Inactivity timeout (--ping-restart), restarting
Wed Oct 02 14:05:22 2013 SIGUSR1[soft,ping-restart] received, process restarting
Wed Oct 02 14:05:24 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Oct 02 14:05:24 2013 UDPv4 link local: [undef]
Wed Oct 02 14:05:24 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Wed Oct 02 14:05:25 2013 [2412460NET] Peer Connection Initiated with [AF_INET]192.168.0.1:1194
Wed Oct 02 14:05:27 2013 Preserving previous TUN/TAP instance: 2412460VPN
Wed Oct 02 14:05:27 2013 Initialization Sequence Completed
Wed Oct 02 14:07:35 2013 SIGTERM[hard,] received, process exiting

The clients are both Samsung netbooks, so that is the reason for the hardware similarities.

The DD-WRT router (server) doesn't seem to be recording any logs, despite being set to verb 5.

You can see in this screenshot, this is where they should be, Apparently.... It does connect ok though.

hendrik.witbooi

Oop, ok I've fixed that glaringly obvious one. Just connected both clients, same issue, both get the same IP, but the logs looking a lot better.

Wed Oct 02 22:49:16 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Wed Oct 02 22:49:17 2013 UDPv4 link local: [undef]
Wed Oct 02 22:49:17 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Wed Oct 02 22:49:18 2013 [2412460NET] Peer Connection Initiated with [AF_INET]192.168.0.1:1194
Wed Oct 02 22:49:20 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Oct 02 22:49:20 2013 open_tun, tt->ipv6=0
Wed Oct 02 22:49:20 2013 TAP-WIN32 device [RoutedVPN] opened: \\.\Global\{6A16B677-35A6-4DFD-88C3-116B7E3599DB}.tap
Wed Oct 02 22:49:20 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.0.50/255.255.255.0 on interface {6A16B677-35A6-4DFD-88C3-116B7E3599DB} [DHCP-serv: 192.168.0.0, lease-time: 31536000]
Wed Oct 02 22:49:20 2013 Successful ARP Flush on interface [5] {6A16B677-35A6-4DFD-88C3-116B7E3599DB}
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.0.1 p=0 i=3 t=4 pr=3 a=8394 h=0 m=25/-1/-1/-1/-1
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=8412 h=0 m=1/-1/-1/-1/-1
169.254.0.0 255.255.0.0 192.168.0.101 p=0 i=3 t=3 pr=3 a=8387 h=0 m=20/-1/-1/-1/-1
192.168.0.0 255.255.255.0 192.168.0.101 p=0 i=3 t=3 pr=2 a=8397 h=0 m=25/-1/-1/-1/-1
192.168.0.101 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=8397 h=0 m=25/-1/-1/-1/-1
192.168.0.255 255.255.255.255 192.168.0.101 p=0 i=3 t=3 pr=2 a=8397 h=0 m=25/-1/-1/-1/-1
224.0.0.0 240.0.0.0 192.168.0.101 p=0 i=3 t=3 pr=2 a=8397 h=0 m=25/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=5 t=3 pr=2 a=8412 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=65543 t=3 pr=2 a=8405 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=2 t=3 pr=2 a=8412 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=3 t=3 pr=2 a=8412 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 192.168.0.101 p=0 i=4 t=3 pr=2 a=8412 h=0 m=1/-1/-1/-1/-1
SYSTEM ADAPTER LIST
TAP-Windows Adapter V9 #2 - Packet Scheduler Miniport
  Index = 4
  GUID = {3592107B-96B7-424B-9436-9A5B4FB5E248}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:35:92:10:7b
  GATEWAY =  
  DNS SERV = 8.8.8.8 8.8.4.4 
TAP-Windows Adapter V9 - Packet Scheduler Miniport
  Index = 5
  GUID = {6A16B677-35A6-4DFD-88C3-116B7E3599DB}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:6a:16:b6:77
  GATEWAY =  
  DHCP SERV = 255.255.255.255 
  DHCP LEASE OBTAINED = Sat Oct 26 22:44:29 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV = 8.8.8.8 8.8.4.4 
Bluetooth LAN Access Server Driver - Packet Scheduler Miniport
  Index = 65543
  GUID = {95011281-89D1-45D3-BD18-7DE1B4A961EF}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:22:69:e4:6e:76
  GATEWAY =  
  DHCP SERV =  
  DHCP LEASE OBTAINED = Tue Jan 19 03:14:07 2038
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV =  
Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller - Packet Scheduler Miniport
  Index = 2
  GUID = {A71F2CCB-2CBB-44BF-B59F-12F33484B2DA}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:13:77:f2:e3:53
  GATEWAY =  
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Wed Sep 18 14:48:56 2013
  DHCP LEASE EXPIRES  = Thu Sep 19 14:48:56 2013
  DNS SERV =  
Atheros AR5007EG Wireless Network Adapter - Packet Scheduler Miniport
  Index = 3
  GUID = {009694AB-F071-41A2-86C0-84A7D39026E6}
  IP = 192.168.0.101/255.255.255.0 
  MAC = 00:24:2b:31:3d:40
  GATEWAY = 192.168.0.1/0.0.0.0 
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Sat Oct 26 20:29:57 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV = 192.168.0.1 
Wed Oct 02 22:49:55 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Wed Oct 02 22:51:13 2013 SIGTERM[hard,] received, process exiting

Do you think if I try the second option here

http://openvpn.net/index.php/open-source/faq/community-software-server/323-i-want-to-set-up-an-ethernet-bridge-on-the-1921681024-subnet-existing-dhcp.html

It might help?

hendrik.witbooi

Exotic subnetting . . . 192.168.0.50/55

I know, but I just want it to be functional not exotic!!

I thought it would be easier to troubleshoot issues (like the one I'm having) if everything were on the same subnet/IP range...

hendrik.witbooi

I tried changing the server config to put the OpenVPN clients on a different subnet like so:

mode server
proto udp 
port 1194 
dev tap0
server-bridge 192.168.0.1 255.255.255.0 192.168.1.0 192.168.1.5 
 # Gateway (VPN Server)   Subnetmask   Start-IP   End-IP 
keepalive 10 120 
daemon 
verb 5 
client-to-client 
dh /tmp/openvpn/dh.pem 
ca /tmp/openvpn/ca.crt 
cert /tmp/openvpn/cert.pem 
key /tmp/openvpn/key.pem 

# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl

Now it won't connect at all:

Thu Oct 03 01:14:00 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Thu Oct 03 01:14:01 2013 UDPv4 link local: [undef]
Thu Oct 03 01:14:01 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Thu Oct 03 01:14:01 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:14:03 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:14:07 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:14:16 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:14:32 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:15:01 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Oct 03 01:15:01 2013 TLS Error: TLS handshake failed
Thu Oct 03 01:15:01 2013 SIGUSR1[soft,tls-error] received, process restarting
Thu Oct 03 01:15:03 2013 UDPv4 link local: [undef]
Thu Oct 03 01:15:03 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Thu Oct 03 01:15:03 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:15:05 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:15:09 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:15:18 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:15:34 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:16:03 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Oct 03 01:16:03 2013 TLS Error: TLS handshake failed
Thu Oct 03 01:16:03 2013 SIGUSR1[soft,tls-error] received, process restarting
Thu Oct 03 01:16:05 2013 UDPv4 link local: [undef]
Thu Oct 03 01:16:05 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Thu Oct 03 01:16:05 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:16:07 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:16:11 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:16:19 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:16:35 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:17:05 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Oct 03 01:17:05 2013 TLS Error: TLS handshake failed
Thu Oct 03 01:17:05 2013 SIGUSR1[soft,tls-error] received, process restarting
Thu Oct 03 01:17:07 2013 UDPv4 link local: [undef]
Thu Oct 03 01:17:07 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Thu Oct 03 01:17:07 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:17:09 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:17:13 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:17:21 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:17:37 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Oct 03 01:17:45 2013 SIGTERM[hard,] received, process exiting

Previously I could get 1 client to access the network remotely.

Will go back to the original config for now.

I'm sure you've noticed, I'm not too good at this! Any suggestions?

hendrik.witbooi

Thanks, sorry although it is very difficult for me to tear myself away and go to bed, rather than work all night to solve a networking problem.

I had to be responsible and work today.

I learnt (the hard way, before seeing your post) that way wouldn't work.

Also tried 10.8.8.0/5 with no luck there either. The connection kept being reset before failing again.

Do you think I should change the routers whole IP scheme (which means changing lots of IP cameras, printers and computers with static IP's) to a similar structure?

Because when I changed the pool to the above last night, the gateway was still 192.168.0.1

hendrik.witbooi

Yep, I do. I've just changed everything, server config looks like this now:

mode server
proto udp 
port 1194 
dev tap0
server-bridge 24.12.46.1 255.255.255.0 24.12.46.15 24.12.46.20 
 # Gateway (VPN Server)   Subnetmask   Start-IP   End-IP 
keepalive 10 120 
daemon 
verb 5 
client-to-client 
dh /tmp/openvpn/dh.pem 
ca /tmp/openvpn/ca.crt 
cert /tmp/openvpn/cert.pem 
key /tmp/openvpn/key.pem 

# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl

Still having the same problem, each client is assigned 24.12.46.15.

If I try create a subnet just for the VPN the connection keeps being reset and ultimately fails.

hendrik.witbooi

Nope, each client has it's own cert and key.

The first client to connect get the first available IP (24.12.46.15) and can access network resources, printers, WoL, etc. Everything works fine.

When the second client connects, it gets the same IP. There is no warning of IP conflict etc, but it doesn't work.

First client keeps on working a-ok :/

It's a strange one, because I can't seem to find anybody who has had the same problem.

I have even re-flashed the router with the VPN firmware etc in case it was buggy.

hendrik.witbooi

Just tried it on one client, it won't connect at all then :/

Log looks like this:

Thu Oct 03 22:44:02 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jun  3 2013
Enter Management Password:
Thu Oct 03 22:44:03 2013 UDPv4 link local: [undef]
Thu Oct 03 22:44:03 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Thu Oct 03 22:44:03 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:05 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:07 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:09 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:09 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:11 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:13 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:16 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:17 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:18 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:20 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:22 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:23 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:27 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:29 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:31 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:33 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:35 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:37 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:39 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:41 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:43 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:45 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:47 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:49 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:51 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:53 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:55 2013 TCP/UDP: Incoming packet rejected from [AF_INET]24.12.46.1:1194[2], expected peer address: [AF_INET]80.111.53.85:1194 (allow this incoming source address/port by removing --remote or adding --float)
Thu Oct 03 22:44:55 2013 SIGTERM[hard,] received, process exiting

Any thoughts?

Thanks for all your help so far by the way, very much appreciated...

hendrik.witbooi

Is there any way a client can request a particular IP?

hendrik.witbooi

Cool, thanks.

I will try to implement that when I get home from work.

However dunno how using the Linksys DD-WRT router as a server will work out.

But it's worth a shot, right?

hendrik.witbooi

No luck I'm afraid.

I added this to my server config

client-config-dir /tmp/openvpn/ccd/

and this to the router start up script

openvpn --mktun --dev tap0 
brctl addif br0 tap0 
ifconfig tap0 0.0.0.0 promisc up
mkdir -p /tmp/openvpn/ccd
echo "ifconfig-push 24.12.46.16 24.12.46.1" > /tmp/openvpn/ccd/client1

* last 2 lines are new bits

But it just gave me the same ole IP 24.12.46.15, first in the list.

I was testing from a wifi hotspot earlier, both netbooks were given the above IP, could BOTH access network shares etc, but not eachother.

Which I think is really strange, kind of a step in the right direction, but for the wrong reason.

They should have been connected as x.x.x.15 and x.x.x.16.

Are you familiar with the OpenVPN daemon included in the VPN DD-WRT firmware, is there any other settings with the router that could affect this?

Thank you kindly for your suggestions and time...

hendrik.witbooi

Sorry,

Client log

Sat Oct 05 02:33:40 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Sat Oct 05 02:33:41 2013 UDPv4 link local: [undef]
Sat Oct 05 02:33:41 2013 UDPv4 link remote: [AF_INET]80.111.53.85:1194
Sat Oct 05 02:33:42 2013 [2412460NET] Peer Connection Initiated with [AF_INET]24.12.46.1:1194
Sat Oct 05 02:33:44 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Oct 05 02:33:44 2013 open_tun, tt->ipv6=0
Sat Oct 05 02:33:44 2013 TAP-WIN32 device [2412460VPN] opened: \\.\Global\{3592107B-96B7-424B-9436-9A5B4FB5E248}.tap
Sat Oct 05 02:33:44 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 24.12.46.15/255.255.255.0 on interface {3592107B-96B7-424B-9436-9A5B4FB5E248} [DHCP-serv: 24.12.46.0, lease-time: 31536000]
Sat Oct 05 02:33:44 2013 Successful ARP Flush on interface [4] {3592107B-96B7-424B-9436-9A5B4FB5E248}
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 24.12.46.1 p=0 i=3 t=4 pr=3 a=2171 h=0 m=25/-1/-1/-1/-1
24.12.46.0 255.255.255.0 24.12.46.101 p=0 i=3 t=3 pr=2 a=2173 h=0 m=25/-1/-1/-1/-1
24.12.46.101 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=2173 h=0 m=25/-1/-1/-1/-1
24.255.255.255 255.255.255.255 24.12.46.101 p=0 i=3 t=3 pr=2 a=2173 h=0 m=25/-1/-1/-1/-1
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=15342 h=0 m=1/-1/-1/-1/-1
169.254.0.0 255.255.0.0 24.12.46.101 p=0 i=3 t=3 pr=3 a=2168 h=0 m=20/-1/-1/-1/-1
224.0.0.0 240.0.0.0 24.12.46.101 p=0 i=3 t=3 pr=2 a=2173 h=0 m=25/-1/-1/-1/-1
255.255.255.255 255.255.255.255 24.12.46.101 p=0 i=5 t=3 pr=2 a=15342 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 24.12.46.101 p=0 i=131079 t=3 pr=2 a=3426 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 24.12.46.101 p=0 i=2 t=3 pr=2 a=15342 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 24.12.46.101 p=0 i=3 t=3 pr=2 a=15342 h=0 m=1/-1/-1/-1/-1
255.255.255.255 255.255.255.255 24.12.46.101 p=0 i=4 t=3 pr=2 a=15342 h=0 m=1/-1/-1/-1/-1
SYSTEM ADAPTER LIST
TAP-Windows Adapter V9 #2 - Packet Scheduler Miniport
  Index = 4
  GUID = {3592107B-96B7-424B-9436-9A5B4FB5E248}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:35:92:10:7b
  GATEWAY =  
  DHCP SERV = 255.255.255.255 
  DHCP LEASE OBTAINED = Sat Oct 05 02:01:38 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV =  
TAP-Windows Adapter V9 - Packet Scheduler Miniport
  Index = 5
  GUID = {6A16B677-35A6-4DFD-88C3-116B7E3599DB}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:6a:16:b6:77
  GATEWAY =  
  DHCP SERV = 255.255.255.255 
  DHCP LEASE OBTAINED = Sat Oct 05 01:38:28 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV =  
Bluetooth LAN Access Server Driver - Packet Scheduler Miniport
  Index = 131079
  GUID = {95011281-89D1-45D3-BD18-7DE1B4A961EF}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:22:69:e4:6e:76
  GATEWAY =  
  DHCP SERV =  
  DHCP LEASE OBTAINED = Tue Jan 19 03:14:07 2038
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV =  
Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller - Packet Scheduler Miniport
  Index = 2
  GUID = {A71F2CCB-2CBB-44BF-B59F-12F33484B2DA}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:13:77:f2:e3:53
  GATEWAY =  
  DHCP SERV = 192.168.0.1 
  DHCP LEASE OBTAINED = Wed Sep 18 14:48:56 2013
  DHCP LEASE EXPIRES  = Thu Sep 19 14:48:56 2013
  DNS SERV =  
Atheros AR5007EG Wireless Network Adapter - Packet Scheduler Miniport
  Index = 3
  GUID = {009694AB-F071-41A2-86C0-84A7D39026E6}
  IP = 24.12.46.101/255.255.255.0 
  MAC = 00:24:2b:31:3d:40
  GATEWAY = 24.12.46.1/0.0.0.0 
  DHCP SERV = 24.12.46.1 
  DHCP LEASE OBTAINED = Sat Oct 05 01:58:07 2013
  DHCP LEASE EXPIRES  = Tue Jan 19 03:14:07 2038
  DNS SERV = 24.12.46.1 
Sat Oct 05 02:34:19 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Sat Oct 05 02:35:13 2013 SIGTERM[hard,] received, process exiting

For some reason when I try to enable logging on the router it won't connect (or log) connection just keeps getting reset.

I hope I wasn't just sold a dud router, it did come from ebay...

hendrik.witbooi

Too many times, I've also done a 30/30/30 several times.

This involves holding the reset pin for 30 secs, removing power for 30secs whilst still holding reset. Then finally reintroducing the power whilst still holding reset for 30 seconds.

This supposedly takes the router completely back to 0.

I have then followed the instructions (in the guide I followed in my first post) to first flash the router with the "mini" firmware, before flashing with VPN firmware.

I have tried ignoring this advice, every variable therein.

I have re-entered all my routers settings manually rather than using a backup file in case it was tainted.

Everything I could think of.

I'm just really surprised that I can't find a single similar problem anywhere!

The DD-WRT guys didn't even respond.

I know routers aren't your speciality (on this board at least!), but to your knowledge are there any other router settings that could cause problems like these.

I have options like

Under:
Network Address Server Settings (DHCP)

Use DNSMasq for DHCP - Selected

Use DNSMasq for DNS - Selected

DHCP-Authoritative - Selected

Thanks again for your help and time, you are the only one who has responded on 2 boards and engaged me on this.

Can't find anything similar via the google, so without your suggestions I would have been sectioned by now, or at least damaged a keyboard!

hendrik.witbooi

Just had an amazing brainwave, implemented it and am basking in the familiar glow of abject failure once more.

I thought if I used a static lease to assign an IP based on the MAC address of the connecting virtual TAP adapter it could work, nope...

Here's a pic so you can see where I was going with it:

hendrik.witbooi

Ok, will try remaking them in a bit, see how it goes...

I'll let you know, thanks...

hendrik.witbooi

Ok, first one, the NVRAM - No difference.

Will make the certs now...

hendrik.witbooi

Oh debbie10t, thank you, thank you.

It's funny because I had created different certs before and they wouldn't connect at all, so once the old ones worked I was happy to get a step in the right direction.

I guess I was tunnel minded then...

But yeah, it's working perfectly now. First to connect gets /15 second gets /16.

Thank you for sticking with me, nobody else answered here, no-one answered on DDWRT. I REALLY appreciate it

It really is people like you who keep communities like this going...

hendrik.witbooi

Cheers, it's always easier to be nice than it is to be rude (helps you get what you want too!! 😛)

And I learnt a lot throughout this process about how to diagnose problems, I thought the config files were all important.

But ensuring the certs are created properly and having some logs to review is the key to getting it done.

The router as a sever just made it harder too, no logs working. I've had a routed config through my server for internet sharing working perfectly for months now, set it up nice and easy, never gave me any trouble.

This was another kettle of fish!

Nice one, thanks again 🙂

hendrik.witbooi

Sure, I'm all good thanks 🙂