I've succesfully configured openvpn on my Ubuntu VPS and can easily connect to it through my Ubuntu client. Windows however is proving to be a challenge as nothing seems to be getting logged and the provided GUI icon that launches in the system tray stays red constantly and does not seem to have any menu options when right clicked. I get proxy settings, about and exit as the only options. I have generated client keys on the server, copied them to the 2008 box and configured my client like this:
****CLIENT CONFIG****
dev tun
proto udp
remote myserver 1194
resolv-retry infinite
nobind
# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nobody
persist-key
persist-tun
ca C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt
cert C:\\Program Files (x86)\\OpenVPN\\config\\client1.crt
key C:\\Program Files (x86)\\OpenVPN\\config\\client1.key
ns-cert-type server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 3
;mute 20
Here is the server config
port 1194
# TCP or UDP server?
;proto tcp
proto udp
dev tun
ca ca.crt
cert ploxbox.crt client2.crt
key ploxbox.key client2.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
;max-clients 100
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 3
;mute 20
It looks to me like the client is not even attempting to connect. Using netstat I don't see anything even trying to connect to my remote server. I come here to ask the pros. Thanks
