I have a Linksys E3000 as the OpenVPN server and a Linksys 1200 as the OpenVPN client (both running DD-wrt v24-sp2 big SVN revision 18946M NEWD-2 K2.6 eko firmware).
I am able to connect to the server router with no issues using a desktop OpenVPN client, however my client router will not connect.
Here is the log:
0140225 23:00:05 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20140225 23:00:05 I Re-using SSL/TLS context
20140225 23:00:05 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
20140225 23:00:05 Socket Buffers: R=[114688->131072] S=[114688->131072]
20140225 23:00:05 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
20140225 23:00:05 Local Options String: 'V4 dev-type tun link-mtu 1541 tun-mtu 1500 proto UDPv4 cipher BF-CBC auth SHA1 keysize 128 key-method 2 tls-client'
20140225 23:00:05 Expected Remote Options String: 'V4 dev-type tun link-mtu 1541 tun-mtu 1500 proto UDPv4 cipher BF-CBC auth SHA1 keysize 128 key-method 2 tls-server'
20140225 23:00:05 Local Options hash (VER=V4): '3514370b'
20140225 23:00:05 Expected Remote Options hash (VER=V4): '239669a8'
20140225 23:00:05 I UDPv4 link local: [undef]
20140225 23:00:05 I UDPv4 link remote: 99.231.58.25:1194
20140225 23:00:05 TLS: Initial packet from 99.231.58.25:1194 sid=ea09e862 646ee98e
20140225 23:00:05 VERIFY OK: depth=1 /C=CA/ST=ON/L=Toronto/O=OpenVPN/OU=MyUNIT/CN=OpenVPN-CA/name=kumanan/emailAddress=kumanan@unityauto.com
20140225 23:00:05 VERIFY OK: nsCertType=SERVER
20140225 23:00:05 VERIFY OK: depth=0 /C=CA/ST=ON/L=Toronto/O=OpenVPN/OU=MyUNIT/CN=server/name=kumanan/emailAddress=kumanan@unityauto.com
20140225 23:00:06 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140225 23:00:06 NOTE: --mute triggered...
20140225 23:00:06 4 variation(s) on previous 5 message(s) suppressed by --mute
20140225 23:00:06 I [server] Peer Connection Initiated with 99.231.58.25:1194
20140225 23:00:08 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
20140225 23:00:08 PUSH: Received control message: 'PUSH_REPLY route 192.168.54.0 255.255.255.0 dhcp-option DNS 192.168.66.1 route 192.168.66.1 topology net30 ping 10 ping-restart 120 ifconfig 192.168.66.6 192.168.66.5'
20140225 23:00:08 OPTIONS IMPORT: timers and/or timeouts modified
20140225 23:00:08 OPTIONS IMPORT: --ifconfig/up options modified
20140225 23:00:08 OPTIONS IMPORT: route options modified
20140225 23:00:08 NOTE: --mute triggered...
20140225 23:00:08 1 variation(s) on previous 5 message(s) suppressed by --mute
20140225 23:00:08 I Preserving previous TUN/TAP instance: tun1
20140225 23:00:08 I Initialization Sequence Completed
20140225 23:03:18 MANAGEMENT: Client connected from 127.0.0.1:5001
20140225 23:03:18 D MANAGEMENT: CMD 'state'
20140225 23:03:18 MANAGEMENT: Client disconnected
20140225 23:03:18 MANAGEMENT: Client connected from 127.0.0.1:5001
20140225 23:03:18 D MANAGEMENT: CMD 'state'
20140225 23:03:18 MANAGEMENT: Client disconnected
20140225 23:03:18 MANAGEMENT: Client connected from 127.0.0.1:5001
20140225 23:03:18 D MANAGEMENT: CMD 'state'
20140225 23:03:18 MANAGEMENT: Client disconnected
20140225 23:03:19 MANAGEMENT: Client connected from 127.0.0.1:5001
20140225 23:03:19 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
My OpenVPN server router configuration:
push "route 192.168.54.0 255.255.255.0"
push "dhcp-option DNS 192.168.66.1"
server 192.168.66.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl
# management parameter allows DD-WRT\s OpenVPN Status web page to access the server\s management port
# port must be 5001 for scripts embedded in firmware to work
management localhost 5001
Server router's firewall settings:
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
# These next two lines may or may not be necessary.
# I (dereks) did not need them, but bmatthewshea did.
# Thus, we include them so that this works for more people:
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
The server router is 192.168.1.1 and the client router is 192.168.2.1.
Again - I can connect to the OpenVPN server router through a desktop GUI, but not through the other client router with OpenVPN.
Also - I want the client router to connect to the server router and for all connected computers to always display the server router's WAN IP when on the internet (the client router IP must never leak)
I've been banging my head on this for a few days now, any help would be appreciated.
