abhijit@eastpoint.co.uk
I am new at using OPEN VPN.I am trying to establish a connection between two pc's in the same network where pc-1 acts as server and "praneeth-pc" acts as client.Whenever I am trying to connect the client with the server, there is no response from the server. I think the client call is not reaching the server. I tried to turn off the firewall settings on the server machine but still no use.
Heres the log from the client machine
Wed Jan 15 19:33:46 2014 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Jan 15 19:33:46 2014 TCP/UDP: Closing socket
Wed Jan 15 19:33:46 2014 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jan 15 19:33:46 2014 Restart pause, 2 second(s)
Wed Jan 15 19:33:48 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 15 19:33:48 2014 Re-using SSL/TLS context
Wed Jan 15 19:33:48 2014 LZO compression initialized
Wed Jan 15 19:33:48 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jan 15 19:33:48 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jan 15 19:33:48 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 15 19:33:48 2014 Local Options hash (VER=V4): '41690919'
Wed Jan 15 19:33:48 2014 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jan 15 19:33:48 2014 UDPv4 link local: [undef]
Wed Jan 15 19:33:48 2014 UDPv4 link remote: xxx.xxx.xx.xxx:1194
The client config is
client
dev tun
proto udp
remote xxx.xxx.xx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\praneeth-pc.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\praneeth-pc.key"
ns-cert-type server
comp-lzo
verb 3
explicit-exit-notify 2
ping 10
ping-restart 60
route-method exe
route-delay 2
My server config is
port 1194
proto udp
# Firewall is completely disabled
dev tun
ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key" # This file should be kept secret
dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh2048.pem"
server 10.8.0.0 255.255.255.0
server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
server-bridge
push "route 192.168.10.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
The Server Log is
Wed Jan 15 19:16:16 2014 Sleeping for 10 seconds...
Wed Jan 15 19:16:26 2014 Successful ARP Flush on interface [21] {CD3BF263-20A7-40F4-97B8-94F5AC6F31A9}
Wed Jan 15 19:16:26 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Wed Jan 15 19:16:26 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jan 15 19:16:26 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:16:26 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 15 19:16:26 2014 UDPv4 link local (bound): [undef]:1194
Wed Jan 15 19:16:26 2014 UDPv4 link remote: [undef]
Wed Jan 15 19:16:26 2014 MULTI: multi_init called, r=256 v=256
Wed Jan 15 19:16:26 2014 IFCONFIG POOL: base=10.8.0.4 size=62
Wed Jan 15 19:16:26 2014 Initialization Sequence Completed
The server machine is connected to internet through a wireless router and the ip address is 192.168.2.3
The client machine ip is 192.168.2.6
Please help me out on this as it would be really helpful for me to get to know more about OPEN Vpn.
Thanks all,
abhijit@eastpoint.co.uk
Thanks for the reply,
I have looked into ethernet bridge and tried to change the config files of the client and server accordingly. Still I keep getting this error when trying to connect the client with the server.
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 16 17:59:49 2014 us=718000 192.168.2.6:51516 TLS Error: TLS handshake failed
Thu Jan 16 17:59:49 2014 us=718000 192.168.2.6:51516 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 16 17:59:49 2014 us=718000 192.168.2.6:51515 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 16 17:59:49 2014 us=718000 192.168.2.6:51515 TLS Error: TLS handshake failed.
Though all the firewalls both on the client and server machine has been turned of and all the necessary certificates being provided. I noticed one more thing when providing the "remote hostname/public ip port" in the client config file,when I am trying to give the public ip address it is not getting connected but when I am trying to use the server machine's host name the client is getting connected and trying to communicate with the server.I am very much confused as I have less knowledge about OPEN Vpn. Please help me out!!
abhijit@eastpoint.co.uk
Hi,
I need some info on another subject as well.We are trying to use OPEN Vpn in our web application which uses node js(Javascript).Trying to look for some node modules for OPEN Vpn and stumbled across a few.Like cloudflash-openvpn and openvpn.Could you please suggest me which one would be more appropriate?
Thanks
abhijit@eastpoint.co.uk
Hi,
This is my server config file
port 1194
proto udp
# Firewall is completely disabled
dev tap
dev-node tap-bridge
#dev-node MyTap
ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key" # This file should be kept secret
dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh2048.pem"
server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
push "route 192.168.10.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6
And this is the ipconfig/all of server machine
Windows IP Configuration
Host Name . . . . . . . . . . . . : ep2
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Belkin
Ethernet adapter Network Bridge:
Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Microsoft Network Adapter Multiplexor Dri
ver
Physical Address. . . . . . . . . : XX-XX-XX-XX-XX-40
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::e137:1f35:f65c:8165%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 16 January 2014 11:36:17
Lease Expires . . . . . . . . . . : 23 February 2150 01:38:19
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DHCPv6 IAID . . . . . . . . . . . : 277369339
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-80-1C-03-88-51-FB-6D-6F-40
DNS Servers . . . . . . . . . . . : 192.168.2.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Wireless LAN adapter Local Area Connection* 11:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address. . . . . . . . . : C8-BE-19-F2-E3-8A
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.Belkin:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 12:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:3484:3ebd:8c8f:ad3b(Pref
erred)
Link-local IPv6 Address . . . . . : fe80::3484:3ebd:8c8f:ad3b%7(Preferred)
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 150994944
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-80-1C-03-88-51-FB-6D-6F-40
NetBIOS over Tcpip. . . . . . . . : Disabled
abhijit@eastpoint.co.uk
Thanks for the reply.
I have made the suggested changes and still getting the error.
Options error: Unrecognized option or missing parameter(s) in server.ovpn:35: server-bridge (2.1.3)
Use --help for more information.
I have also added TAP-Windows Adapter V9 to the network bridge.
Here is my server config file along with the ipconfig/all
server config file
port 1194
proto udp
# Firewall is completely disabled
dev tap
dev-node tap-bridge
#dev-node MyTap
ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key" # This file should be kept secret
dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh2048.pem"
server-bridge 192.168.2.1 255.255.255.0
#push "route 192.168.10.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6
ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : ep2
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Belkin
Ethernet adapter Network Bridge:
Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Microsoft Network Adapter Multiplexor Dri
ver
Physical Address. . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.2.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 16 January 2014 11:36:17
Lease Expires . . . . . . . . . . : 23 February 2150 03:28:01
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DNS Servers . . . . . . . . . . . : 192.168.2.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Wireless LAN adapter Local Area Connection* 11:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address. . . . . . . . . : C8-BE-19-F2-E3-8A
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.Belkin:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 12:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:3484:3ebd:8c8f:ad3b(Pref
erred)
Link-local IPv6 Address . . . . . : fe80::3484:3ebd:8c8f:ad3b%7(Preferred)
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 150994944
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-80-1C-03-88-51-FB-6D-6F-40
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Program Files (x86)\OpenVPN\easy-rsa>reg query HKEY_LOCAL_MACHINE\SYSTEM\Curr
entControlSet\Services\Tcpip6\Parameters /v DisabledComponents
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
DisabledComponents REG_DWORD 0x11
Thanks
abhijit@eastpoint.co.uk
Hello,
This time I am getting a new error. I am trying to connect to the server through openvpn-client and I am getting a new error message now
Unable to obtain Session ID from 192.x.x.3:1194: XML-RPC: ConnectionRefusedError: 10061: No connection could be made because the target machine actively refused it..
