HI
Sorry about this as it seems a common error but after wading through many posts I cannot find a solution - word blind I guess! Doubly irritating because I had this working 6 months ago . . . . . .!
Anyway
Objective is to allow an existing non-web application to run from 4 sites but share the same database
Initial setup: OpenVPN 2.2.2
Two Win 7 PCs (Client and server - expecting 4 clients if I ever get it working)
Client is connected to an external Wifi signal (BT FON) and hence to the internet
(Have also tried client connected to guest half of o2 wifi box but no change)
Server is connected to Router (o2 wireless box 5) and hence to internet.
o2 wireless box has UDPport 1194 forwarded to the server PC
server PC firewall is turned off
Server appears to connect OK (OpenVPN GUI shows green AND Control Panel->Network connections shows Incoming connection with no clients connected)
Client firewall is turned off.
Client is connected via noip and a hostname
Client uses correct IP address but is unable to connect.
Changed noip host to actual IP address but it makes no difference.
Seems that the server is listening but nothing is getting through.
Port is forwarded.
Firewalls are off
Confused!! and grateful for any help
server config
port 1194
proto udp
dev tun
ca "c:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\config\\server.crt"
key "c:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret
dh "c:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
client config
dev tun
proto udp
remote hhvpf.no-ip.biz 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "c:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\config\\R60.crt"
key "c:\\Program Files\\OpenVPN\\config\\R60.key"
ns-cert-type server
comp-lzo
verb 6
SERVER LOG
- Tue Feb 18 21:48:51 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built
on Dec 15 2011
Tue Feb 18 21:48:51 2014 NOTE: your local LAN uses the extremely common subnet a
ddress 192.168.0.x or 192.168.1.x. Be aware that this might create routing conf
licts if you connect to the VPN server from public locations such as internet ca
fes that use the same subnet.
Tue Feb 18 21:48:51 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or hig
her to call user-defined scripts or executables
Tue Feb 18 21:48:51 2014 Diffie-Hellman initialized with 1024 bit key
Tue Feb 18 21:48:51 2014 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0
]
Tue Feb 18 21:48:51 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 18 21:48:51 2014 ROUTE default_gateway=192.168.1.254
Tue Feb 18 21:48:51 2014 TAP-WIN32 device [Local Area Connection 5] opened: \\.\
Global\{0D2BDD3B-526B-41E5-AA93-A2D9440BE1D4}.tap
Tue Feb 18 21:48:51 2014 TAP-Win32 Driver Version 9.9
Tue Feb 18 21:48:51 2014 TAP-Win32 MTU=1500
Tue Feb 18 21:48:51 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 1
0.8.0.1/255.255.255.252 on interface {0D2BDD3B-526B-41E5-AA93-A2D9440BE1D4} [DHC
P-serv: 10.8.0.2, lease-time: 31536000]
Tue Feb 18 21:48:51 2014 Sleeping for 10 seconds...
Tue Feb 18 21:49:01 2014 Successful ARP Flush on interface [29] {0D2BDD3B-526B-4
1E5-AA93-A2D9440BE1D4}
Tue Feb 18 21:49:01 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255
.255.0 10.8.0.2
Tue Feb 18 21:49:01 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMet
ric1=30 and dwForwardType=4
Tue Feb 18 21:49:01 2014 Route addition via IPAPI succeeded [adaptive]
Tue Feb 18 21:49:01 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:
0 EL:0 AF:3/1 ]
Tue Feb 18 21:49:01 2014 UDPv4 link local (bound): [undef]:1194
Tue Feb 18 21:49:01 2014 UDPv4 link remote: [undef]
Tue Feb 18 21:49:01 2014 MULTI: multi_init called, r=256 v=256
Tue Feb 18 21:49:01 2014 IFCONFIG POOL: base=10.8.0.4 size=62
Tue Feb 18 21:49:01 2014 IFCONFIG POOL LIST
Tue Feb 18 21:49:01 2014 Initialization Sequence Completed
Tue Feb 18 21:49:01 2014 IPv6 in tun mode is not supported in OpenVPN 2.2
and it sits there waiting . . .
CLIENT LOG
- Tue Feb 18 21:38:36 2014 us=401000 single_session = DISABLED
Tue Feb 18 21:38:36 2014 us=417000 push_peer_info = DISABLED
Tue Feb 18 21:38:36 2014 us=417000 tls_exit = DISABLED
Tue Feb 18 21:38:36 2014 us=417000 tls_auth_file = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=432000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=432000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=448000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=479000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=479000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=495000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=495000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=495000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=495000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=510000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=510000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=510000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=526000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=526000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=526000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=542000 pkcs11_protected_authentication = DISABLED
Tue Feb 18 21:38:36 2014 us=557000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=557000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=557000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=573000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=573000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=573000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=588000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=588000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=604000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=604000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=620000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=620000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=620000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=635000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=635000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=635000 pkcs11_private_mode = 00000000
Tue Feb 18 21:38:36 2014 us=635000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=635000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=651000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=651000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=651000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=651000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=682000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=682000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=682000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=698000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=698000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=698000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=698000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=713000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=713000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=713000 pkcs11_cert_private = DISABLED
Tue Feb 18 21:38:36 2014 us=713000 pkcs11_pin_cache_period = -1
Tue Feb 18 21:38:36 2014 us=713000 pkcs11_id = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=729000 pkcs11_id_management = DISABLED
Tue Feb 18 21:38:36 2014 us=729000 server_network = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=729000 server_netmask = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=729000 server_bridge_ip = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=729000 server_bridge_netmask = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=729000 server_bridge_pool_start = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=744000 server_bridge_pool_end = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=744000 ifconfig_pool_defined = DISABLED
Tue Feb 18 21:38:36 2014 us=744000 ifconfig_pool_start = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=744000 ifconfig_pool_end = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=744000 ifconfig_pool_netmask = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=760000 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=776000 ifconfig_pool_persist_refresh_freq = 600
Tue Feb 18 21:38:36 2014 us=776000 n_bcast_buf = 256
Tue Feb 18 21:38:36 2014 us=776000 tcp_queue_limit = 64
Tue Feb 18 21:38:36 2014 us=776000 real_hash_size = 256
Tue Feb 18 21:38:36 2014 us=791000 virtual_hash_size = 256
Tue Feb 18 21:38:36 2014 us=791000 client_connect_script = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=791000 learn_address_script = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=807000 client_disconnect_script = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=822000 client_config_dir = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=838000 ccd_exclusive = DISABLED
Tue Feb 18 21:38:36 2014 us=838000 tmp_dir = 'C:\Users\RINCEW~1\AppData\Local\
Temp\'
Tue Feb 18 21:38:36 2014 us=838000 push_ifconfig_defined = DISABLED
Tue Feb 18 21:38:36 2014 us=838000 push_ifconfig_local = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=838000 push_ifconfig_remote_netmask = 0.0.0.0
Tue Feb 18 21:38:36 2014 us=838000 enable_c2c = DISABLED
Tue Feb 18 21:38:36 2014 us=854000 duplicate_cn = DISABLED
Tue Feb 18 21:38:36 2014 us=869000 cf_max = 0
Tue Feb 18 21:38:36 2014 us=869000 cf_per = 0
Tue Feb 18 21:38:36 2014 us=869000 max_clients = 1024
Tue Feb 18 21:38:36 2014 us=885000 max_routes_per_client = 256
Tue Feb 18 21:38:36 2014 us=885000 auth_user_pass_verify_script = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=885000 auth_user_pass_verify_script_via_file = DIS
ABLED
Tue Feb 18 21:38:36 2014 us=900000 ssl_flags = 0
Tue Feb 18 21:38:36 2014 us=900000 client = ENABLED
Tue Feb 18 21:38:36 2014 us=900000 pull = ENABLED
Tue Feb 18 21:38:36 2014 us=916000 auth_user_pass_file = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=916000 show_net_up = DISABLED
Tue Feb 18 21:38:36 2014 us=932000 route_method = 0
Tue Feb 18 21:38:36 2014 us=932000 ip_win32_defined = DISABLED
Tue Feb 18 21:38:36 2014 us=947000 ip_win32_type = 3
Tue Feb 18 21:38:36 2014 us=947000 dhcp_masq_offset = 0
Tue Feb 18 21:38:36 2014 us=947000 dhcp_lease_time = 31536000
Tue Feb 18 21:38:36 2014 us=963000 tap_sleep = 0
Tue Feb 18 21:38:36 2014 us=978000 dhcp_options = DISABLED
Tue Feb 18 21:38:36 2014 us=978000 dhcp_renew = DISABLED
Tue Feb 18 21:38:36 2014 us=978000 dhcp_pre_release = DISABLED
Tue Feb 18 21:38:36 2014 us=994000 dhcp_release = DISABLED
Tue Feb 18 21:38:36 2014 us=994000 domain = '[UNDEF]'
Tue Feb 18 21:38:36 2014 us=994000 netbios_scope = '[UNDEF]'
Tue Feb 18 21:38:37 2014 us=10000 netbios_node_type = 0
Tue Feb 18 21:38:37 2014 us=10000 disable_nbt = DISABLED
Tue Feb 18 21:38:37 2014 us=10000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS1
1] built on Dec 15 2011
Tue Feb 18 21:38:37 2014 us=25000 NOTE: OpenVPN 2.1 requires '--script-security
2' or higher to call user-defined scripts or executables
Tue Feb 18 21:38:38 2014 us=382000 LZO compression initialized
Tue Feb 18 21:38:38 2014 us=382000 Control Channel MTU parms [ L:1542 D:138 EF:3
8 EB:0 ET:0 EL:0 ]
Tue Feb 18 21:38:38 2014 us=726000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 18 21:38:39 2014 us=84000 Data Channel MTU parms [ L:1542 D:1450 EF:42 E
B:135 ET:0 EL:0 AF:3/1 ]
Tue Feb 18 21:38:39 2014 us=84000 Local Options String: 'V4,dev-type tun,link-mt
u 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key
-method 2,tls-client'
Tue Feb 18 21:38:39 2014 us=100000 Expected Remote Options String: 'V4,dev-type
tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keys
ize 128,key-method 2,tls-server'
Tue Feb 18 21:38:39 2014 us=100000 Local Options hash (VER=V4): '41690919'
Tue Feb 18 21:38:39 2014 us=100000 Expected Remote Options hash (VER=V4): '530fd
ded'
Tue Feb 18 21:38:39 2014 us=116000 UDPv4 link local: [undef]
Tue Feb 18 21:38:39 2014 us=131000 UDPv4 link remote: 188.221.132.137:1194
Tue Feb 18 21:38:39 2014 us=131000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:38:39 2014 us=147000 UDPv4 READ [0] from [undef]: DATA UNDEF len=-
1
Tue Feb 18 21:38:41 2014 us=237000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:38:45 2014 us=402000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:38:54 2014 us=61000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_CO
NTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:39:10 2014 us=940000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:39:39 2014 us=316000 TLS Error: TLS key negotiation failed to occu
r within 60 seconds (check your network connectivity)
Tue Feb 18 21:39:39 2014 us=316000 TLS Error: TLS handshake failed
Tue Feb 18 21:39:39 2014 us=316000 TCP/UDP: Closing socket
Tue Feb 18 21:39:39 2014 us=316000 SIGUSR1[soft,tls-error] received, process res
tarting
Tue Feb 18 21:39:39 2014 us=332000 Restart pause, 2 second(s)
Tue Feb 18 21:39:41 2014 us=344000 NOTE: OpenVPN 2.1 requires '--script-security
2' or higher to call user-defined scripts or executables
Tue Feb 18 21:39:41 2014 us=344000 Re-using SSL/TLS context
Tue Feb 18 21:39:41 2014 us=360000 LZO compression initialized
Tue Feb 18 21:39:41 2014 us=360000 Control Channel MTU parms [ L:1542 D:138 EF:3
8 EB:0 ET:0 EL:0 ]
Tue Feb 18 21:39:41 2014 us=376000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 18 21:39:41 2014 us=532000 Data Channel MTU parms [ L:1542 D:1450 EF:42
EB:135 ET:0 EL:0 AF:3/1 ]
Tue Feb 18 21:39:41 2014 us=547000 Local Options String: 'V4,dev-type tun,link-m
tu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,ke
y-method 2,tls-client'
Tue Feb 18 21:39:41 2014 us=563000 Expected Remote Options String: 'V4,dev-type
tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keys
ize 128,key-method 2,tls-server'
Tue Feb 18 21:39:41 2014 us=610000 Local Options hash (VER=V4): '41690919'
Tue Feb 18 21:39:41 2014 us=625000 Expected Remote Options hash (VER=V4): '530fd
ded'
Tue Feb 18 21:39:41 2014 us=656000 UDPv4 link local: [undef]
Tue Feb 18 21:39:41 2014 us=656000 UDPv4 link remote: 188.221.132.137:1194
Tue Feb 18 21:39:41 2014 us=672000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:39:41 2014 us=672000 UDPv4 READ [0] from [undef]: DATA UNDEF len=-
1
Tue Feb 18 21:39:43 2014 us=825000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:39:47 2014 us=7000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_CON
TROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:39:55 2014 us=650000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:40:11 2014 us=499000 UDPv4 WRITE [14] to 188.221.132.137:1194: P_C
ONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Feb 18 21:40:41 2014 us=498000 TLS Error: TLS key negotiation failed to occu
r within 60 seconds (check your network connectivity)
and it loops round these 40 or so lines