Hello Could you help me making configuration file for openvpn server ? I have home wifi router with 192.168.1.0 subnet, 192.168.1.1 gateway and I want to make vpn server on one pc (with 192.168.1.107 ip address) connected to this net. I have made such a configuration file, but I am not sure if it is correct: [quote] port 1194 proto udp dev tun ca /etc/openvpn/ca.crt cert /etc/openvpn/lubuntu.crt key /etc/openvpn/lubuntu.key dh /etc/openvpn/dh2048.pem server 10.8.0.0 255.255.255.0 push "route 192.168.1.0 255.255.255.0" keepalive 1 3 comp-lzo push "redirect-gateway def1" [/quote] What should I change on my wifi router - only allow port fowarding on 192.168.1.107:1194 ?

server configuration - pc in home wifi network

baszek

Hello
Could you help me making configuration file for openvpn server ? I have home wifi router with 192.168.1.0 subnet, 192.168.1.1 gateway and I want to make vpn server on one pc (with 192.168.1.107 ip address) connected to this net.

I have made such a configuration file, but I am not sure if it is correct:

port 1194
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/lubuntu.crt
key /etc/openvpn/lubuntu.key
dh /etc/openvpn/dh2048.pem
server 10.8.0.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
keepalive 1 3
comp-lzo
push "redirect-gateway def1"

What should I change on my wifi router - only allow port fowarding on 192.168.1.107:1194 ?

baszek

It is blackbox panwa 2204a (also called BB54G) - this model acctually has got vpn server option with some rsa keys, but I wanted to configure openvpn on my old laptop with lubuntu os, which is working as a home server.

baszek

OK - I have almost made it. I made port fowarding on my router and now it is communicating but in my windows 8 client (I use OpenVpn GUI as a administrator) I get connection failed error and there is such a text in log file:

 "No server certificate verification method has been enabled"."

THis is log file when I was trying to connect using my mobile LTE internet:

Thu Jul 31 12:44:37 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Thu Jul 31 12:44:37 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Thu Jul 31 12:44:37 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jul 31 12:44:37 2014 UDPv4 link local: [undef]
Thu Jul 31 12:44:37 2014 UDPv4 link remote: [AF_INET]80.53.194.202:1194
Thu Jul 31 12:44:50 2014 [lubuntu] Peer Connection Initiated with [AF_INET]80.53.194.202:1194
Thu Jul 31 12:44:53 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jul 31 12:44:53 2014 open_tun, tt->ipv6=0
Thu Jul 31 12:44:53 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{E436FBAA-5E80-4390-B6AD-2A8040A58459}.tap
Thu Jul 31 12:44:53 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {E436FBAA-5E80-4390-B6AD-2A8040A58459} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Jul 31 12:44:53 2014 Successful ARP Flush on interface [24] {E436FBAA-5E80-4390-B6AD-2A8040A58459}
Thu Jul 31 12:44:58 2014 Initialization Sequence Completed
Thu Jul 31 12:45:09 2014 [lubuntu] Inactivity timeout (--ping-restart), restarting
Thu Jul 31 12:45:09 2014 SIGUSR1[soft,ping-restart] received, process restarting
Thu Jul 31 12:45:11 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jul 31 12:45:11 2014 UDPv4 link local: [undef]
Thu Jul 31 12:45:11 2014 UDPv4 link remote: [AF_INET]80.53.194.202:1194
Thu Jul 31 12:45:23 2014 [lubuntu] Peer Connection Initiated with [AF_INET]80.53.194.202:1194
Thu Jul 31 12:45:26 2014 [lubuntu] Inactivity timeout (--ping-restart), restarting
Thu Jul 31 12:45:26 2014 SIGUSR1[soft,ping-restart] received, process restarting
Thu Jul 31 12:45:28 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jul 31 12:45:28 2014 UDPv4 link local: [undef]
Thu Jul 31 12:45:28 2014 UDPv4 link remote: [AF_INET]80.53.194.202:1194

baszek

Thx a lot ! I have made it to work ! It appers, that there is some problem with windows tap device - to make it work I have to go to network manager and disable then enable tap device again before making openvpn connection using gui tool.
If I will not disable and enable it, openvpn gui shows some error, which is saying that all windows tap devices are in use.
I dont now if it is some kind of openvpn bug or it is just windows 8 :-)