cospps
Hi, i am running openvnp on a VPS (Centos 6.5). At this opevpn server i have to connect one iOS openvpn client (at last one more Win 8 client) however it's everythings ok. i can connect to the server and from server i can ping my client. I do this vpn just for a reason: i want get the ipv4 of server with my client.
Someone can halp me?
below my actual configuration and the reports of connection logs (from server and from client)
server.conf
port 1194
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3
client .ovpn
client
dev tun
proto udp
remote 87.106.23.183 1194
resolv-retry infinite
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server
comp-lzo
verb 1
<ca>
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
xxx
-----END RSA PRIVATE KEY-----
</key>
This is the openvpn-status.log
OpenVPN CLIENT LIST
Updated,Thu Mar 13 17:52:26 2014
Common Name,Real Address, Bytes Received, Bytes Sent, Connected Since
UNDEF, 151.18.198.186:59122, 656, 2932, Thu Mar 13 17:52:21 2014
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,0
END
This is the iOS openvpn client connection logs
2014-03-13 17:54:25 EVENT: CONNECTING
2014-03-13 17:54:25 Tunnel Options:V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-03-13 17:54:25 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.4-140
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1
2014-03-13 17:54:29 VERIFY OK: depth=1
cert. version : 3
serial number : 95:D6:24:4D:73:7B:11:DF
issuer name : xx
subject name : xx
issued on : 2014-03-13 15:31:06
expires on : 2024-03-10 15:31:06
signed using : RSA+SHA1
RSA key size : 1024 bits
2014-03-13 17:54:29 VERIFY OK: depth=0
cert. version : 3
serial number : 01
issuer name : xx
subject name : xx
issued on : 2014-03-13 15:32:05
expires on : 2024-03-10 15:32:05
signed using : RSA+SHA1
RSA key size : 1024 bits
2014-03-13 17:54:32 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-03-13 17:54:32 Session is ACTIVE
2014-03-13 17:54:33 EVENT: GET_CONFIG
2014-03-13 17:54:33 Sending PUSH_REQUEST to server...
2014-03-13 17:54:34 OPTIONS:
0 [route] [10.8.0.1]
1 [topology] [net30]
2 [ping] [10]
3 [ping-restart] [120]
4 [ifconfig] [10.8.0.6] [10.8.0.5]
2014-03-13 17:54:34 LZO-ASYM init swap=0 asym=0
2014-03-13 17:54:34 EVENT: ASSIGN_IP
2014-03-13 17:54:34 Connected via tun
2014-03-13 17:54:34 EVENT: CONNECTED @xx.xx.xx.xx:1194 (xx.xx.xx.xx.) via /UDPv4 on tun/10.8.0.6/
This is the /var/logs/messages
Mar 13 17:56:37 s17050304 openvpn[13477]: 151.18.198.186:59131 [client] Peer Connection Initiated with [AF_INET]151.18.198.186:59131
Mar 13 17:56:37 s17050304 openvpn[13477]: client/151.18.198.186:59131 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mar 13 17:56:37 s17050304 openvpn[13477]: client/151.18.198.186:59131 MULTI: Learn: 10.8.0.6 -> client/151.18.198.186:59131
Mar 13 17:56:37 s17050304 openvpn[13477]: client/151.18.198.186:59131 MULTI: primary virtual IP for client/151.18.198.186:59131: 10.8.0.6
Mar 13 17:56:38 s17050304 openvpn[13477]: client/151.18.198.186:59131 PUSH: Received control message: 'PUSH_REQUEST'
Mar 13 17:56:38 s17050304 openvpn[13477]: client/151.18.198.186:59131 send_push_reply(): safe_cap=940
Mar 13 17:56:38 s17050304 openvpn[13477]: client/151.18.198.186:59131 SENT CONTROL [client]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,pi$
cospps
Ok, thanks i solved, was already configured well also iptables, but when the service was starting it takes automatically the serversamples.conf and not my personal server.conf
Perfect. Thanks!
