Hello,
I have been working on this for close to two weeks now. I have been searching through google, browsing the forums and it has taken a lot of adjustments to get this far. I am not experienced in VPN's at all. I am interning for a company that wants remote access to their servers from home, just the files, no applications. I am trying to implement a free solution. I am pretty sure I read that for the file access I will have to bridge, but right now I think it would be better to actually get a successful connection outside the network before making it even harder.
I have successfully connected from a client inside the network, to the server. However when I try logging in from a client at my house
computer, I am not getting through. I had the same error for a while from inside the network where the handshake would fail. After adding in port forwarding rules and adding firewall exceptions for port 1194, I was able to get it working. I want to point out that while inside the network, I am still using the actual IP address, not local IP address.
Server Side
There is the software firewall that I have added openvpn as an exception to allow.
There is a physical firewall that I have added port forwarding for 1194.
There is a router from ISP (had them put in a port forwarding for me)
Before I added these port forwarding rules, I was able to connect via local IP address for server, but not the true IP address.
Client Side (from outside network)
There is a modem/router that I added port forwarding for 1194.
There is a software firewall that I disabled to try and get working.
Server Configuration
port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key" # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Client Configuration
client
dev tun
proto udp
remote XXX.XXX.XXX.XXX 1194
float
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client1.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client1.key"
ns-cert-type server
comp-lzo
verb 3
I was getting
Incoming packet rejected from [AF_INET]LOCAL.IP.ADDRESS:1194[2], expected peer address: [AF_INET]ACTUAL.IP.ADDRESS:1194 (allow this incoming source address/port by removing --remote or adding --float)
So I added the float line.
Again: when I try logging in from a client at my house computer, I am not getting through. I had the same error for a while from inside the network where the handshake would fail.
I am not sure what other information you will need.
Thank you in advance,
Brent
