I have been battling to setup my OpenVPN Server remotely and I do not know if this is this has been the root of all evil in my life: hanging on the dreaded "Initialization Sequence Completed" and unknown key when running sysctl -p
Problem 1
[root@RLA04-NIX1 ~]# service openvpn stop
Shutting down openvpn: [ OK ]
[root@RLA04-NIX1 ~]# openvpn /etc/openvpn/server.conf
Tue Oct 29 14:28:19 2013 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Tue Oct 29 14:28:19 2013 PLUGIN_INIT: POST /usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so '[/usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Tue Oct 29 14:28:19 2013 Diffie-Hellman initialized with 1024 bit key
Tue Oct 29 14:28:19 2013 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Tue Oct 29 14:28:19 2013 Socket Buffers: R=[229376->131072] S=[229376->131072]
Tue Oct 29 14:28:19 2013 ROUTE_GATEWAY 41.185.26.1/255.255.255.0 IFACE=eth0 HWADDR=00:1d:d8:b7:1f:dc
Tue Oct 29 14:28:19 2013 TUN/TAP device tun0 opened
Tue Oct 29 14:28:19 2013 TUN/TAP TX queue length set to 100
Tue Oct 29 14:28:19 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Oct 29 14:28:19 2013 /sbin/ip link set dev tun0 up mtu 1500
Tue Oct 29 14:28:19 2013 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Tue Oct 29 14:28:19 2013 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Tue Oct 29 14:28:19 2013 UDPv4 link local (bound): [undef]
Tue Oct 29 14:28:19 2013 UDPv4 link remote: [undef]
Tue Oct 29 14:28:19 2013 MULTI: multi_init called, r=256 v=256
Tue Oct 29 14:28:19 2013 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
[color=#FF0000]Tue Oct 29 14:28:19 2013 Initialization Sequence Completed[/color]
And it will hang there till kingdom come...
here is my server.conf file:
port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3
Each time I start from scratch (at times I will even flush myself out of the server :lol: ), but this always happens,
however I also run into this problem:
Problem 2
sysctl -p
[root@RLA04-NIX1 ~]# sysctl -p
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
[color=#FF0000]error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key
error: "net.bridge.bridge-nf-call-iptables" is an unknown key
error: "net.bridge.bridge-nf-call-arptables" is an unknown key[/color]
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
[root@RLA04-NIX1 ~]#
what is sysctl -p used for, its purpose and why does it give an unknown key (error)
Question 3
And lastly, if I change port 1194 to 443 in server.conf and client.ovpn and allow traffic for port 443 in the firewall, will all traffic be tunneled through port 443???
thnx
