Hello everybody,
I am just trying to geht a secure remote access running to get hands on my data stored in my home-server when I am on tour.
I am a total OpenVPN-Noob, but made my way trough different tutorials.
But, things do not work the way they should - i am not able to get a connection to my server via internet.
The setup is as follows:
Client ---- OpenVPN GUI --- Internet --- No-IP Static DNS --- Router with Port forwarding 1194 to VPN-Server --- Homeserver running virtual box with VPN-Server and bridged network
Client-Log:
Thu May 01 19:55:51 2014 OpenVPN 2.3.3 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Apr 14 2014
Enter Management Password:
Thu May 01 19:55:51 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu May 01 19:55:51 2014 Need hold release from management interface, waiting...
Thu May 01 19:55:51 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu May 01 19:55:51 2014 MANAGEMENT: CMD 'state on'
Thu May 01 19:55:51 2014 MANAGEMENT: CMD 'log all on'
Thu May 01 19:55:51 2014 MANAGEMENT: CMD 'hold off'
Thu May 01 19:55:51 2014 MANAGEMENT: CMD 'hold release'
Thu May 01 19:55:51 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu May 01 19:55:52 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu May 01 19:55:52 2014 UDPv4 link local: [undef]
Thu May 01 19:55:52 2014 UDPv4 link remote: [AF_INET]xxx.xx.xxx.xxx:1194
Thu May 01 19:55:52 2014 MANAGEMENT: >STATE:1398966952,WAIT,,,
Thu May 01 19:56:53 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu May 01 19:56:53 2014 TLS Error: TLS handshake failed
Thu May 01 19:56:53 2014 SIGUSR1[soft,tls-error] received, process restarting
Thu May 01 19:56:53 2014 MANAGEMENT: >STATE:1398967013,RECONNECTING,tls-error,,
Thu May 01 19:56:53 2014 Restart pause, 2 second(s)
Server-Log:
Fri May 02 23:41:17 2014 us=378302 OpenVPN 2.3.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Apr 14 2014
Enter Management Password:
Fri May 02 23:41:17 2014 us=378302 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri May 02 23:41:17 2014 us=378302 Need hold release from management interface, waiting...
Fri May 02 23:41:17 2014 us=878302 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri May 02 23:41:17 2014 us=987677 MANAGEMENT: CMD 'state on'
Fri May 02 23:41:17 2014 us=987677 MANAGEMENT: CMD 'log all on'
Fri May 02 23:41:18 2014 us=18927 MANAGEMENT: CMD 'hold off'
Fri May 02 23:41:18 2014 us=18927 MANAGEMENT: CMD 'hold release'
Fri May 02 23:41:18 2014 us=175177 Diffie-Hellman initialized with 2048 bit key
Fri May 02 23:41:18 2014 us=175177 TLS-Auth MTU parms [ L:1589 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 02 23:41:18 2014 us=175177 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 02 23:41:18 2014 us=175177 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri May 02 23:41:18 2014 us=175177 MANAGEMENT: >STATE:1399066878,ASSIGN_IP,,xxx.xxx.xxx.x,
Fri May 02 23:41:18 2014 us=175177 open_tun, tt->ipv6=0
Fri May 02 23:41:18 2014 us=175177 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{6906EA12-FBF5-4712-AC92-1C293E043B84}.tap
Fri May 02 23:41:18 2014 us=175177 TAP-Windows Driver Version 9.9
Fri May 02 23:41:18 2014 us=175177 TAP-Windows MTU=1500
Fri May 02 23:41:18 2014 us=175177 Notified TAP-Windows driver to set a DHCP IP/netmask of xxx.xxx.xxx.x/255.255.255.0 on interface {6906EA12-FBF5-4712-AC92-1C293E043B84} [DHCP-serv: xxx.xxx.xxx.x, lease-time: 31536000]
Fri May 02 23:41:18 2014 us=190802 Sleeping for 10 seconds...
Fri May 02 23:41:28 2014 us=190802 NOTE: FlushIpNetTable failed on interface [15] {6906EA12-FBF5-4712-AC92-1C293E043B84} (status=5) : Zugriff verweigert
Fri May 02 23:41:28 2014 us=190802 Data Channel MTU parms [ L:1589 D:1450 EF:57 EB:4 ET:32 EL:0 ]
Fri May 02 23:41:28 2014 us=190802 UDPv4 link local (bound): [undef]
Fri May 02 23:41:28 2014 us=190802 UDPv4 link remote: [undef]
Fri May 02 23:41:28 2014 us=190802 MULTI: multi_init called, r=256 v=256
Fri May 02 23:41:28 2014 us=190802 IFCONFIG POOL: base=xxx.xxx.xxx.x size=253, ipv6=0
Fri May 02 23:41:28 2014 us=190802 IFCONFIG POOL LIST
Fri May 02 23:41:28 2014 us=190802 Initialization Sequence Completed
Fri May 02 23:41:28 2014 us=190802 MANAGEMENT: >STATE:1399066888,CONNECTED,SUCCESS,xxx.xxx.xxx.x,
Fri May 02 23:41:38 2014 us=972052 MULTI: multi_create_instance called
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Re-using SSL/TLS context
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Control Channel MTU parms [ L:1589 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Data Channel MTU parms [ L:1589 D:1450 EF:57 EB:4 ET:32 EL:0 ]
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Local Options String: 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Local Options hash (VER=V4): '3c42a582'
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 Expected Remote Options hash (VER=V4): '7778e742'
Fri May 02 23:41:38 2014 us=972052 80.187.103.20:8058 TLS: Initial packet from [AF_INET]xx.xxx.xxx.xx:8058, sid=7951a2af d5472311
Fri May 02 23:42:38 2014 us=768927 80.187.103.20:8058 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri May 02 23:42:38 2014 us=768927 80.187.103.20:8058 TLS Error: TLS handshake failed
Fri May 02 23:42:38 2014 us=768927 80.187.103.20:8058 SIGUSR1[soft,tls-error] received, client-instance restarting
Fri May 02 23:42:41 2014 us=565802 MULTI: multi_create_instance called
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Re-using SSL/TLS context
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Control Channel MTU parms [ L:1589 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Data Channel MTU parms [ L:1589 D:1450 EF:57 EB:4 ET:32 EL:0 ]
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Local Options String: 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Local Options hash (VER=V4): '3c42a582'
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 Expected Remote Options hash (VER=V4): '7778e742'
Fri May 02 23:42:41 2014 us=565802 80.187.103.20:21755 TLS: Initial packet from [AF_INET]xx.xxx.xxx.xx:21755, sid=43155eec 1a1a2ee9
Client-Config:
client
port 1194
proto udp
dev tap
ca ca.crt
cert client1.crt
key client1.key
cipher AES-256-CBC
remote xxxxxxxxx.noip.xxx
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
verb 3
mute 20
Server-Config:
server 192.168.254.0 255.255.255.0
port 1194
proto udp
dev tap
ca ca.crt
cert xxxxxxx.crt
key xxxxxxx.key
dh dh2048.pem
cipher AES-256-CBC
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.255.255.0"
push "redirect-gateway"
push "DISABLE-NBT"
push "DOMAIN administrator-de.de"
push "dhcp-option DNS 10.0.0.10"
push "dhcp-option WINS 10.0.0.11"
keepalive 15 60
persist-key
persist-tun
status openvpn-status.txt
log-append openvpn.log
verb 4
mute 15
As far as I can see, the server indeed receives the inital packet sent from the client, but the connection is not established...
I tried different Internet-Connections at the client-side and disabled any Windows-Firewall to give it a try, but no luck...
The Port-forwarding is set up in the router, I tried UDP and TCP though...
Can anyone tell me what I am doing wrong?
I guess there is some stupid noob-failure inside my configuration which I can not figure out at the moment 😉
I would be very happy if someone could help me.
Thank you very much in advance!
