My open Vpn client has failed to connect to the server

herbertssemanda

I have installed opn vpn server and a client on my laptop. I followed the instructions as shown in HOW TO
mu sever config as shown below

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 192.168.200.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
client-to-client
duplicate-cn
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

My client config is as shown below

client
dev tun
proto udp
tls-client
remote 196.0.55.246 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
pull
comp-lzo
verb 3
mute 20
route-method exe

the server connects very well but when i connect the client i get the following

Tue Aug 12 14:55:07 2014 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 8 2010
Tue Aug 12 14:55:07 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 12 14:55:07 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Aug 12 14:55:07 2014 LZO compression initialized
Tue Aug 12 14:55:07 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 12 14:55:07 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Aug 12 14:55:07 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Aug 12 14:55:07 2014 Local Options hash (VER=V4): '41690919'
Tue Aug 12 14:55:07 2014 Expected Remote Options hash (VER=V4): '530fdded'
Tue Aug 12 14:55:07 2014 UDPv4 link local: [undef]
Tue Aug 12 14:55:07 2014 UDPv4 link remote: 196.0.55.246:1194
Tue Aug 12 14:56:07 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 12 14:56:07 2014 TLS Error: TLS handshake failed
Tue Aug 12 14:56:07 2014 TCP/UDP: Closing socket
Tue Aug 12 14:56:07 2014 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 12 14:56:07 2014 Restart pause, 2 second(s)

i do not know what is rwong i am using windows 7 32bit

regards.

Herbert

maikcat

server log?

Michael.

herbertssemanda

The client is still not connecting to the server
Can you please tell me the steps which i have to take to set up the server and the client Machines
The Key signing Machine was not the server is that ok?
I installed Tap window
How do I configure the Tap window Ethernet card

maikcat

i requested the server logs...where are they?

The client is still not connecting to the server

i can see that from your posted client logs,no server logs no diagnosis can be made.

The Key signing Machine was not the server is that ok?

yes it is as long you are using the correct certs on your clients/server (SAME ca.crt)

How do I configure the Tap window Ethernet card

you dont need to configure something specific to your tap adapter..

post your server logs if you want help.

Michael.

herbertssemanda

My server logs are as shown below

Sat Aug 16 09:52:23 2014 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 8 2010
Sat Aug 16 09:52:23 2014 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Sat Aug 16 09:52:23 2014 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Aug 16 09:52:23 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Aug 16 09:52:23 2014 Diffie-Hellman initialized with 1024 bit key
Sat Aug 16 09:52:23 2014 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Aug 16 09:52:23 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Aug 16 09:52:23 2014 ROUTE default_gateway=192.168.0.1
Sat Aug 16 09:52:23 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{0253B1A3-0FCC-43A9-A235-F2865E304BF1}.tap
Sat Aug 16 09:52:23 2014 TAP-Win32 Driver Version 9.7
Sat Aug 16 09:52:23 2014 TAP-Win32 MTU=1500
Sat Aug 16 09:52:23 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.200.1/255.255.255.252 on interface {0253B1A3-0FCC-43A9-A235-F2865E304BF1} [DHCP-serv: 192.168.200.2, lease-time: 31536000]
Sat Aug 16 09:52:23 2014 Sleeping for 10 seconds...
Sat Aug 16 09:52:33 2014 Successful ARP Flush on interface [15] {0253B1A3-0FCC-43A9-A235-F2865E304BF1}
Sat Aug 16 09:52:33 2014 C:\WINDOWS\system32\route.exe ADD 192.168.200.0 MASK 255.255.255.0 192.168.200.2
Sat Aug 16 09:52:33 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Aug 16 09:52:33 2014 Route addition via IPAPI succeeded [adaptive]
Sat Aug 16 09:52:33 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Aug 16 09:52:33 2014 UDPv4 link local (bound): [undef]:1194
Sat Aug 16 09:52:33 2014 UDPv4 link remote: [undef]
Sat Aug 16 09:52:33 2014 MULTI: multi_init called, r=256 v=256
Sat Aug 16 09:52:33 2014 IFCONFIG POOL: base=192.168.200.4 size=62
Sat Aug 16 09:52:33 2014 IFCONFIG POOL LIST
Sat Aug 16 09:52:33 2014 Initialization Sequence Completed

The IP config for the server is as shown below

Ethernet local area Connection 2

IPV4 192.168.200.1
Subnet 255.255.255.252
Wireless LAN Adapter
!Pv4 192.168.0.222
Subnet 255.255.255.0
Default Gateway 192.168.0.1

maikcat

your server logs shows that nothing is reaching openvpn service....

check for:

1)any firewalls that run on your server and filters out openvpn's traffic

2)did you port forward the correct port/proto on your internet router?

3)did you configured your router to allow incoming packets to your openvpn server?

Michael.

herbertssemanda

I did not forward to port proto neither did i configure my router toallow incoming packets to my Openvpn server.

THIS IS MY FIRST TIME TO CONFIGURE A VPN CONECTIVITY

cAN YOU PLEASE TELL ME HOW TO

1. To configure my port to forward to the correct port proto on my internet router

2. To configure my router to allow Incoming packets to my vpn server

Thanks,

Herbert

maikcat

cAN YOU PLEASE TELL ME HOW TO

1. To configure my port to forward to the correct port proto on my internet router

2. To configure my router to allow Incoming packets to my vpn server

both of these are out of openvpn support scope plus there is no way
to know which router do you have....

google is your friend, search for how to configure NAT on your internet router...

Michael.

herbertssemanda

Thank you Michael.

I have done port forwarding and my OPenvpn connected successfully