Hey there,
I am trying to connect a busybox router client to a debian 7 openvpn server. For some reason my client is not able to get an IP address.
You can see my server.conf below:
# IP Tunnel configuration
mode server
ifconfig 172.21.0.1 172.21.0.5
#topology net30
push "route 172.21.0.1"
# local
lport 1194
# tun options
proto udp
tun-mtu 1500
#fragment 1300
mssfix
float
fast-io
# Authentication
tls-server
cipher BF-CBC
tls-cipher "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-$
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server01.crt
key /etc/openvpn/easy-rsa/2.0/keys/server01.key
#client-cert-not-required
#username-as-common-name
# Keepalive, Compression, Logging
#comp-lzo
reneg-sec 86400
keepalive 27 60
ping-timer-rem
persist-tun
persist-key
verb 4
mute 20
log /var/log/openvpn.log
connect-freq 4 1
max-clients 2048
max-routes-per-client 8
#allow userscripts
#script-security 2
status /var/log/openvpn/status.log 1
#client-connect /etc/openvpn/client-connect.sh
#client-disconnect /etc/openvpn/client-disconnect.sh
#auth-user-pass-verify /etc/openvpn/authuser.pl via-file
#client-config-dir /etc/openvpn/ccd
user root
group root
management localhost 9001
tmp-dir /tmp
dev tun0
And this what I can see when trying to connect:
Tue Jan 14 10:30:25 2014 us=966177 192.168.1.10:55960 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 14 10:30:25 2014 us=966336 192.168.1.10:55960 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 14 10:30:25 2014 us=966592 192.168.1.10:55960 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 14 10:30:25 2014 us=966755 192.168.1.10:55960 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 14 10:30:25 2014 us=979278 192.168.1.10:55960 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jan 14 10:30:25 2014 us=979370 192.168.1.10:55960 [cliente1] Peer Connection Initiated with [AF_INET]192.168.1.10:55960
Tue Jan 14 10:30:25 2014 us=979458 cliente1/192.168.1.10:55960 MULTI: no dynamic or static remote --ifconfig address is available for cliente1/192.168.1.10:55960
Tue Jan 14 10:30:28 2014 us=487309 cliente1/192.168.1.10:55960 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jan 14 10:30:28 2014 us=487461 cliente1/192.168.1.10:55960 send_push_reply(): safe_cap=960
Tue Jan 14 10:30:28 2014 us=487606 cliente1/192.168.1.10:55960 SENT CONTROL [cliente1]: 'PUSH_REPLY,route 172.21.0.1,ping 27,ping-restart 60' (status=1)
^C
Could somebody please help me? Server gets an IP address properly.
If additional information is required, please let me know.
Regards.