Hello there
I've setup an OpenVPN server on a Debian machine. Windows clients, iOS clients everything's OK.
I want to use a Debian machine outside my LAN as client.
I generate an ovpn file with auto-connect option, and upload it to the client. I ran the connection using "openvpn --config /pathtothe/openvpnfile.ovpn"
On the server, client seems to be connected (current users on OVPN Access Server Web interface) and bytes sent/received are growing.
I opened another SSH session, and try a ssh connection on another server who's in the remote network, and it failed by timeout.
Here's the log of the Debian client :
root@debianclient:/# openvpn --config /home/nicolas/client.ovpn
Fri Apr 25 08:44:07 2014 OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 19 2013
Fri Apr 25 08:44:07 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 25 08:44:07 2014 Control Channel Authentication: tls-auth using INLINE static key file
Fri Apr 25 08:44:07 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 08:44:07 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 08:44:07 2014 LZO compression initialized
Fri Apr 25 08:44:07 2014 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri Apr 25 08:44:07 2014 Socket Buffers: R=[196608->200000] S=[196608->200000]
Fri Apr 25 08:44:07 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 25 08:44:07 2014 Local Options hash (VER=V4): '504e774e'
Fri Apr 25 08:44:07 2014 Expected Remote Options hash (VER=V4): '14168603'
Fri Apr 25 08:44:07 2014 UDPv4 link local: [undef]
Fri Apr 25 08:44:07 2014 UDPv4 link remote: [AF_INET]83.206.246.130:1194
Fri Apr 25 08:44:07 2014 TLS: Initial packet from [AF_INET]IPVPNSERVER:PORT, sid=e3f91064 fb77b326
Fri Apr 25 08:44:08 2014 VERIFY OK: depth=1, /CN=OpenVPN_CA
Fri Apr 25 08:44:08 2014 VERIFY OK: nsCertType=SERVER
Fri Apr 25 08:44:08 2014 VERIFY OK: depth=0, /CN=OpenVPN_Server
Fri Apr 25 08:44:08 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 25 08:44:08 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 08:44:08 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 25 08:44:08 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 08:44:08 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Apr 25 08:44:08 2014 [OpenVPN_Server] Peer Connection Initiated with [AF_INET]IPVPNSERVER:PORT
Fri Apr 25 08:44:10 2014 SENT CONTROL [OpenVPN_Server]: 'PUSH_REQUEST' (status=1)
Fri Apr 25 08:44:10 2014 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,comp-lzo no,redirect-private def1,redirect-private bypass-dhcp,redirect-private autolocal,route-gateway 172.27.232.1,route 192.168.2.0 255.255.255.0,route 172.27.224.0 255.255.240.0,dhcp-option DNS 192.168.2.5,dhcp-option DOMAIN resfrox.lan,register-dns,block-ipv6,ifconfig 172.27.232.51 255.255.248.0'
Fri Apr 25 08:44:10 2014 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: dhcp-pre-release (2.2.1)
Fri Apr 25 08:44:10 2014 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:5: dhcp-renew (2.2.1)
Fri Apr 25 08:44:10 2014 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:6: dhcp-release (2.2.1)
Fri Apr 25 08:44:10 2014 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:19: register-dns (2.2.1)
Fri Apr 25 08:44:10 2014 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:20: block-ipv6 (2.2.1)
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: LZO parms modified
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: route options modified
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: route-related options modified
Fri Apr 25 08:44:10 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 25 08:44:10 2014 ROUTE default_gateway=IPCLIENT
Fri Apr 25 08:44:10 2014 TUN/TAP device tun0 opened
Fri Apr 25 08:44:10 2014 TUN/TAP TX queue length set to 100
Fri Apr 25 08:44:10 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Apr 25 08:44:10 2014 /sbin/ifconfig tun0 172.27.232.51 netmask 255.255.248.0 mtu 1500 broadcast 172.27.239.255
Fri Apr 25 08:44:15 2014 /sbin/route add -net IPVPNSERVER netmask 255.255.255.255 gw IPGWCLIENT
Fri Apr 25 08:44:15 2014 /sbin/route add -net REMOTESUBNET netmask 255.255.255.0 gw 172.27.232.1 metric 101
Fri Apr 25 08:44:15 2014 /sbin/route add -net 172.27.224.0 netmask 255.255.240.0 gw 172.27.232.1 metric 101
Fri Apr 25 08:44:15 2014 Initialization Sequence Completed
I can't try ping command because it's an hosted machine, and the company has disabled ping command.
On the OpenVPN site, there's this note : When a Linux/Unix client is used with Access Server, the Access Server is unable to alter the DNS settings on the client in question.
Is that mean a Linux client will be able to connect to the VPN but nothing will work after ? I don't think so but I need confirmation 😉
The server is configured in layer3, default configuration and I try to connect with credentials specially created for my Debian client on a Windows machine and it works. I'd like to post the server config file but I don't find it.
Thanks a lot
Nicolas
