Hello - I have tried setting up my first VPN on my home network and although I think I have everything correct, my clients will not connect.
I have spent hours looking at these forums and scouring the web. I am at a loss for what my next step should be.
I hope the experts can help....
I have tried a client on Android and a client on Windows8 using my phone as a hotspot.
I have followed the tutorial here:
http://readwrite.com/2014/04/10/raspberry-pi-vpn-tutorial-server-secure-web-browsing#awesm=~oD6ucVCDLpT7OG
OpenVPN is installed on a Raspberry Pi
It is on my home network behind a router running DD-WRT
1194 is forwarded both UDP and TCP to IP address 10.69.69.122
Here is my openvpn.log. I don't see any errors here. :-(
Fri May 2 16:10:51 2014 us=114890 MULTI: multi_create_instance called
Fri May 2 16:10:51 2014 us=115424 Re-using SSL/TLS context
Fri May 2 16:10:51 2014 us=115660 LZO compression initialized
Fri May 2 16:10:51 2014 us=116532 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Fri May 2 16:10:51 2014 us=116841 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 2 16:10:51 2014 us=117321 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 12
Fri May 2 16:10:51 2014 us=117641 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,
Fri May 2 16:10:51 2014 us=117928 Local Options hash (VER=V4): 'a642654b'
Fri May 2 16:10:51 2014 us=118196 Expected Remote Options hash (VER=V4): '0bdd0804'
Fri May 2 16:10:51 2014 us=118480 TCP connection established with [AF_INET]109.84.3.97:1225
Fri May 2 16:10:51 2014 us=118698 TCPv4_SERVER link local: [undef]
Fri May 2 16:10:51 2014 us=118915 TCPv4_SERVER link remote: [AF_INET]109.84.3.97:1225
Fri May 2 16:10:51 2014 us=353332 109.84.3.97:1225 TCPv4_SERVER READ [42] from [AF_INET]109.84.3.97:1225: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Fri May 2 16:10:51 2014 us=354671 109.84.3.97:1225 TLS: Initial packet from [AF_INET]109.84.3.97:1225, sid=5e6b5a15 d6412e56
Fri May 2 16:10:51 2014 us=356454 109.84.3.97:1225 TCPv4_SERVER WRITE [54] to [AF_INET]109.84.3.97:1225: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Fri May 2 16:10:51 2014 us=411070 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Fri May 2 16:10:51 2014 us=497656 109.84.3.97:1225 TCPv4_SERVER READ [136] from [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=94
Fri May 2 16:10:51 2014 us=838162 109.84.3.97:1225 TCPv4_SERVER WRITE [154] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #2 ] [ 1 ] pid=1 DATA len=100
Fri May 2 16:10:51 2014 us=840232 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=2 DATA len=100
Fri May 2 16:10:51 2014 us=842208 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=3 DATA len=100
Fri May 2 16:10:51 2014 us=843843 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=4 DATA len=100
Fri May 2 16:10:51 2014 us=891227 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #4 ] [ 1 ]
Fri May 2 16:10:51 2014 us=892991 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=5 DATA len=100
Fri May 2 16:10:51 2014 us=933710 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #5 ] [ 2 ]
Fri May 2 16:10:51 2014 us=935448 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=6 DATA len=100
Fri May 2 16:10:51 2014 us=937453 109.84.3.97:1225 TCPv4_SERVER READ [54] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #6 ] [ 3 4 ]
Fri May 2 16:10:51 2014 us=939109 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=7 DATA len=100
Fri May 2 16:10:51 2014 us=941149 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=8 DATA len=100
Fri May 2 16:10:51 2014 us=995153 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #7 ] [ 5 ]
Fri May 2 16:10:51 2014 us=996850 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=9 DATA len=100
Fri May 2 16:10:52 2014 us=43205 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #8 ] [ 6 ]
Fri May 2 16:10:52 2014 us=44942 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #11 ] [ ] pid=10 DATA len=100
Fri May 2 16:10:52 2014 us=55018 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #9 ] [ 7 ]
Fri May 2 16:10:52 2014 us=56791 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #12 ] [ ] pid=11 DATA len=100
Fri May 2 16:10:52 2014 us=58829 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #10 ] [ 8 ]
Fri May 2 16:10:52 2014 us=60625 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #13 ] [ ] pid=12 DATA len=100
Fri May 2 16:10:52 2014 us=93352 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #11 ] [ 9 ]
Fri May 2 16:10:52 2014 us=95013 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #14 ] [ ] pid=13 DATA len=100
Fri May 2 16:10:52 2014 us=111214 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #12 ] [ 10 ]
Fri May 2 16:10:52 2014 us=112933 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #15 ] [ ] pid=14 DATA len=100
Fri May 2 16:10:52 2014 us=142299 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #13 ] [ 11 ]
Fri May 2 16:10:52 2014 us=144037 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #16 ] [ ] pid=15 DATA len=100
Fri May 2 16:10:52 2014 us=201505 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #14 ] [ 12 ]
Fri May 2 16:10:52 2014 us=203426 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #17 ] [ ] pid=16 DATA len=100
Fri May 2 16:10:52 2014 us=245071 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #15 ] [ 13 ]
Fri May 2 16:10:52 2014 us=246743 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #18 ] [ ] pid=17 DATA len=100
Fri May 2 16:10:52 2014 us=248634 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #16 ] [ 14 ]
Fri May 2 16:10:52 2014 us=250294 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #19 ] [ ] pid=18 DATA len=100
Fri May 2 16:10:52 2014 us=257727 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #17 ] [ 15 ]
Fri May 2 16:10:52 2014 us=259379 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #20 ] [ ] pid=19 DATA len=100
Fri May 2 16:10:52 2014 us=291806 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #18 ] [ 16 ]
Fri May 2 16:10:52 2014 us=293587 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to [AF_INET]109.84.3.97:1225: P_CONTROL_V1 kid=0 pid=[ #21 ] [ ] pid=20 DATA len=100
Fri May 2 16:10:52 2014 us=322159 109.84.3.97:1225 TCPv4_SERVER READ [50] from [AF_INET]109.84.3.97:1225: P_ACK_V1 kid=0 pid=[ #19 ] [ 17 ]
Fri May 2 16:10:52 2014 us=323832 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=341499 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=343218 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=369766 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=371527 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=389951 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=391770 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=421566 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=423410 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=443298 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=445026 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=472907 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=474568 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=507196 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=508901 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=523630 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=525366 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=561023 109.84.3.97:1225 TCPv4_SERVER READ [50] from
Fri May 2 16:10:52 2014 us=562684 109.84.3.97:1225 TCPv4_SERVER WRITE [142] to
Fri May 2 16:10:52 2014 us=565791 109.84.3.97:1225 Connection reset, restarting
Fri May 2 16:10:52 2014 us=566906 109.84.3.97:1225 SIGUSR1[soft,connection-rese
Fri May 2 16:10:52 2014 us=568811 TCP/UDP: Closing socket
my client.opvn:
client
dev tun
#proto udp
proto tcp
remote xxxx.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20
<ca>
Certificate:
.......
My server.conf:
local 10.69.69.122 # SWAP THIS NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
dev tun
#proto udp #Some people prefer to use tcp. Don't change it if you don't know.
proto tcp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/xxx.crt # SWAP WITH YOUR CRT NAME
key /etc/openvpn/easy-rsa/keys/xxx.key # SWAP WITH YOUR KEY NAME
dh /etc/openvpn/easy-rsa/keys/dh2048.pem # If you changed to 2048, change that here!
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 10.69.69.122 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 10.69.69.1" # This should already match your router address and not need to be changed.
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 6
I do have
net.ipv4.ip_forward=1
uncommented
iptables change made:
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 10.69.69.122
