I'm able to connect to my VPN that I setup on my Linksys WRT160Nv3 and DD-WRT v24-sp2 (Build 18946M) but I'm unable to ping to my VPN Server at 10.8.0.1. I've tried every suggestion in the HOWTO section at
http://openvpn.net/index.php/open-source/documentation/howto.html#start but I'm still not having any luck.
Here's my server log:
20140823 19:48:15 MULTI: multi_create_instance called
20140823 19:48:15 I 174.238.101.251:1150 Re-using SSL/TLS context
20140823 19:48:15 174.238.101.251:1150 Control Channel MTU parms [ L:1569 D:138 EF:38 EB:0 ET:0 EL:0 ]
20140823 19:48:15 174.238.101.251:1150 Data Channel MTU parms [ L:1569 D:1450 EF:69 EB:4 ET:0 EL:0 ]
20140823 19:48:15 174.238.101.251:1150 Local Options String: 'V4 dev-type tun link-mtu 1569 tun-mtu 1500 proto UDPv4 cipher AES-256-CBC auth SHA256 keysize 256 key-method 2 tls-server'
20140823 19:48:15 174.238.101.251:1150 Expected Remote Options String: 'V4 dev-type tun link-mtu 1569 tun-mtu 1500 proto UDPv4 cipher AES-256-CBC auth SHA256 keysize 256 key-method 2 tls-client'
20140823 19:48:15 174.238.101.251:1150 Local Options hash (VER=V4): 'f2b21a1e'
20140823 19:48:15 174.238.101.251:1150 Expected Remote Options hash (VER=V4): '767ad1da'
20140823 19:48:15 174.238.101.251:1150 TLS: Initial packet from 174.238.101.251:1150 sid=66efb285 6f9c319a
20140823 19:48:18 174.238.101.251:1150 VERIFY OK: depth=1 /C=US/ST=CA/L=SanFrancisco/O=OpenVPN/OU=(deleted)/CN=(deleted)/name=(deleted)/emailAddress=(deleted)
20140823 19:48:18 174.238.101.251:1150 VERIFY OK: depth=0 /C=US/ST=CA/L=SanFrancisco/O=OpenVPN/OU=(deleted)/CN=(deleted)/name=(deleted)/emailAddress=(deleted)
20140823 19:48:18 W 174.238.101.251:1150 WARNING: 'link-mtu' is used inconsistently local='link-mtu 1569' remote='link-mtu 1570'
20140823 19:48:18 W 174.238.101.251:1150 WARNING: 'comp-lzo' is present in remote config but missing in local config remote='comp-lzo'
20140823 19:48:18 174.238.101.251:1150 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
20140823 19:48:18 174.238.101.251:1150 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
20140823 19:48:18 174.238.101.251:1150 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
20140823 19:48:18 174.238.101.251:1150 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
20140823 19:48:19 174.238.101.251:1150 Control Channel: TLSv1 cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA 1024 bit RSA
20140823 19:48:19 I 174.238.101.251:1150 [davisiphone] Peer Connection Initiated with 174.238.101.251:1150
20140823 19:48:19 davisiphone/174.238.101.251:1150 MULTI: Learn: 10.8.0.2 -> davisiphone/174.238.101.251:1150
20140823 19:48:19 davisiphone/174.238.101.251:1150 MULTI: primary virtual IP for davisiphone/174.238.101.251:1150: 10.8.0.2
20140823 19:48:20 davisiphone/174.238.101.251:1150 PUSH: Received control message: 'PUSH_REQUEST'
20140823 19:48:20 davisiphone/174.238.101.251:1150 SENT CONTROL [davisiphone]: 'PUSH_REPLY route 192.168.54.0 255.255.255.0 route-gateway 10.8.0.1 topology subnet ping 10 ping-restart 120 ifconfig 10.8.0.2 255.255.255.0' (status=1)
Here's my Client Log:
2014-08-23 19:48:13 LZO-ASYM init swap=0 asym=0
2014-08-23 19:48:13 EVENT: RESOLVE
2014-08-23 19:48:14 Contacting 73.37.170.144:1194 via UDP
2014-08-23 19:48:14 EVENT: WAIT
2014-08-23 19:48:14 Connecting to server:1194 (73.37.170.144) via UDPv4
2014-08-23 19:48:14 EVENT: CONNECTING
2014-08-23 19:48:14 Tunnel Options:V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client
2014-08-23 19:48:14 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.4-140
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1
2014-08-23 19:48:17 VERIFY OK: depth=1
cert. version : 3
serial number : DF:A8:F7:2F:7A:ED:F2:94
issuer name : C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=Davis, CN=(deleted), 0x29=(deleted), emailAddress=(deleted)
subject name : C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=Davis, CN=(deleted), 0x29=(deleted), emailAddress=(deleted)
issued on : 2014-07-15 01:15:17
expires on : 2024-07-12 01:15:17
signed using : RSA+SHA1
RSA key size : 1024 bits
2014-08-23 19:48:17 VERIFY OK: depth=0
cert. version : 3
serial number : 01
issuer name : C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=(deleted), CN=(deleted), 0x29=(deleted), emailAddress=(deleted)
subject name : C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=server, CN=server, 0x29=server, emailAddress= (deleted)
issued on : 2014-07-15 01:22:51
expires on : 2024-07-12 01:22:51
signed using : RSA+MD5
RSA key size : 1024 bits
2014-08-23 19:48:18 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-08-23 19:48:18 Session is ACTIVE
2014-08-23 19:48:19 EVENT: GET_CONFIG
2014-08-23 19:48:19 Sending PUSH_REQUEST to server...
2014-08-23 19:48:19 OPTIONS:
0 [route] [192.168.54.0] [255.255.255.0]
1 [route-gateway] [10.8.0.1]
2 [topology] [subnet]
3 [ping] [10]
4 [ping-restart] [120]
5 [ifconfig] [10.8.0.2] [255.255.255.0]
2014-08-23 19:48:19 LZO-ASYM init swap=0 asym=0
2014-08-23 19:48:19 EVENT: ASSIGN_IP
2014-08-23 19:48:19 Connected via tun
2014-08-23 19:48:19 EVENT: CONNECTED @server:1194 (73.37.170.144) via /UDPv4 on tun/10.8.0.2/
Based on the instructions in the HOWTO page, it looks like I have a one way connection from client to server. I tried to follow the directions on this webpage
https://community.openvpn.net/openvpn/wiki/255-qconnection-initiated-with-xxxxq-but-i-cannot-ping-the-server-through-the-vpn but it didn't seem to work.
Can anyone help? Below is my configuration:
Server Config file:
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 4
mute 5
log-append /var/log/openvpn
writepid /var/log/openvpnd.pid
management 127.0.0.1 5002
management-log-cache 50
mtu-disc yes
topology subnet
client-config-dir /tmp/openvpn/ccd
script-security 2
port 1194
proto udp
cipher aes-256-cbc
auth sha256
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
client-to-client
fast-io
root@DD-WRT:/tmp/openvpn# cat openvpn.conf
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 4
mute 5
log-append /var/log/openvpn
writepid /var/log/openvpnd.pid
management 127.0.0.1 5002
management-log-cache 50
mtu-disc yes
topology subnet
client-config-dir /tmp/openvpn/ccd
script-security 2
port 1194
proto udp
cipher aes-256-cbc
auth sha256
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
client-to-client
fast-io
tun-mtu 1500
server 10.8.0.0 255.255.255.0
dev tun0
push "route 192.168.54.0 255.255.255.0"
Client Config File:
client
dev tun0
proto udp
auth sha256
cipher aes-256-cbc
remote dnguyen411.ddns.net 1194
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca ca.crt
cert (deleted).crt
key (deleted).key
ns-cert-type server
comp-lzo
verb 4
IPTables -vnL output:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
756 116K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194
53723 7769K ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194
0 0 ACCEPT 0 -- tun0 * 0.0.0.0/0 0.0.0.0/0
0 0 logdrop udp -- vlan2 * 0.0.0.0/0 0.0.0.0/0 udp dpt:520
0 0 logdrop udp -- br0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:520
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:520
609 31648 ACCEPT tcp -- * * 0.0.0.0/0 192.168.54.1 tcp dpt:80
7 483 ACCEPT icmp -- vlan2 * 0.0.0.0/0 0.0.0.0/0
0 0 logdrop 2 -- * * 0.0.0.0/0 0.0.0.0/0
9 540 ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 state NEW
22682 4415K ACCEPT 0 -- br0 * 0.0.0.0/0 0.0.0.0/0 state NEW
3380 787K logdrop 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- tun+ * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.105 udp dpt:49245
19162 2690K ACCEPT udp -- * * 0.0.0.0/0 192.168.54.120 udp dpt:61391
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.54.120 tcp dpt:61391
0 0 ACCEPT 0 -- tun0 br0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- br0 tun0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- * * 10.8.0.0/24 0.0.0.0/0
0 0 ACCEPT 47 -- * vlan2 192.168.54.0/24 0.0.0.0/0
0 0 ACCEPT tcp -- * vlan2 192.168.54.0/24 0.0.0.0/0 tcp dpt:1723
0 0 ACCEPT 0 -- tun0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- * tun0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- br0 br0 0.0.0.0/0 0.0.0.0/0
11345 595K TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
544K 377M lan2wan 0 -- * * 0.0.0.0/0 0.0.0.0/0
531K 376M ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 TRIGGER 0 -- vlan2 br0 0.0.0.0/0 0.0.0.0/0 TRIGGER type:in match:0 relate:0
12515 996K trigger_out 0 -- br0 * 0.0.0.0/0 0.0.0.0/0
12324 986K ACCEPT 0 -- br0 * 0.0.0.0/0 0.0.0.0/0 state NEW
191 10196 logdrop 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- tun+ * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 81287 packets, 17M bytes)
pkts bytes target prot opt in out source destination
Chain advgrp_1 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_10 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_2 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_3 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_4 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_5 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_6 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_7 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_8 (0 references)
pkts bytes target prot opt in out source destination
Chain advgrp_9 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_1 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_10 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_2 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_3 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_4 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_5 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_6 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_7 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_8 (0 references)
pkts bytes target prot opt in out source destination
Chain grp_9 (0 references)
pkts bytes target prot opt in out source destination
Chain lan2wan (1 references)
pkts bytes target prot opt in out source destination
Chain logaccept (0 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain logbrute (0 references)
pkts bytes target prot opt in out source destination
0 0 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: BRUTEFORCE side: source
0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 !recent: UPDATE seconds: 60 hit_count: 4 name: BRUTEFORCE side: source
0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/min burst 1
0 0 logdrop 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain logdrop (6 references)
pkts bytes target prot opt in out source destination
3571 797K DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain logreject (0 references)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
Chain trigger_out (1 references)
pkts bytes target prot opt in out source destination
