Hi,
im trying to connect to networks with an openvpn-tunnel.
Router 1: DD-WRT router (192.168.15.0) (client)
Router 2: Netgear R7000 (192.168.1.0) (server)
The netgear router runs with original firmware (therefore no ssh, editing any config files).
client config file:
# Automatically generated configuration
daemon
client
dev tap11
proto tcp-client
remote vpnda.scislowski.net 12974
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo yes
cipher AES-128-CBC
verb 3
script-security 2
up updown.sh
down updown.sh
ca ca.crt
cert client.crt
key client.key
status-version 2
status status
# Custom Configuration
nobind
persist-key
persist-tun
nobind
comp-lzo
verb 5
Log on the client side:
user.info kernel: device tap11 entered promiscuous mode
daemon.notice openvpn[10403]: OpenVPN 2.3.2 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built o
daemon.warn openvpn[10403]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.ht
daemon.warn openvpn[10403]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
daemon.notice openvpn[10403]: LZO compression initialized
daemon.notice openvpn[10403]: Control Channel MTU parms [ L:1592 D:140 EF:40 EB:0 ET:0 EL:0 ]
daemon.notice openvpn[10403]: Socket Buffers: R=[87380->131072] S=[16384->131072]
daemon.notice openvpn[10403]: Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
daemon.notice openvpn[10408]: Attempting to establish TCP connection with [AF_INET]***.***.****.***:12974 [nonblock]
daemon.notice openvpn[10408]: TCP connection established with [AF_INET]***.***.****.***:12974
daemon.notice openvpn[10408]: TCPv4_CLIENT link local: [undef]
daemon.notice openvpn[10408]: TCPv4_CLIENT link remote: [AF_INET]***.***.****.***:12974
daemon.notice openvpn[10408]: TLS: Initial packet from [AF_INET]***.***.****.***:12974, sid=f01b9881 60ab95fa
daemon.notice openvpn[10408]: VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@net
daemon.notice openvpn[10408]: VERIFY OK: depth=0, C=TW, ST=TW, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
daemon.notice openvpn[10408]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
daemon.notice openvpn[10408]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
daemon.notice openvpn[10408]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
daemon.notice openvpn[10408]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
daemon.notice openvpn[10408]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
daemon.notice openvpn[10408]: [netgear] Peer Connection Initiated with [AF_INET]***.***.****.***:12974
daemon.notice openvpn[10408]: SENT CONTROL [netgear]: 'PUSH_REQUEST' (status=1)
daemon.notice openvpn[10408]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.1 255.255.255.0,route-gateway dhcp,ping
daemon.notice openvpn[10408]: OPTIONS IMPORT: timers and/or timeouts modified
daemon.notice openvpn[10408]: OPTIONS IMPORT: route options modified
daemon.notice openvpn[10408]: OPTIONS IMPORT: route-related options modified
daemon.warn openvpn[10408]: OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by
daemon.warn openvpn[10408]: OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.1.1
daemon.notice openvpn[10408]: TUN/TAP device tap11 opened
daemon.notice openvpn[10408]: TUN/TAP TX queue length set to 100
daemon.notice openvpn[10408]: updown.sh tap11 1500 1592 init
daemon.notice openvpn[10408]: Initialization Sequence Completed
Some more info on the client router:
ifconfig:
tap11 Link encap:Ethernet HWaddr 00:FF:A9:89:A1:04
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:176 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:33781 (32.9 KiB) TX bytes:0 (0.0 B)
route:
Destination Gateway Genmask Flags Metric Ref Use Iface
10.15.0.2 * 255.255.255.255 UH 0 0 0 tun21
***.***.***.*** * 255.255.255.255 UH 0 0 0 vlan2
192.168.15.0 * 255.255.255.0 U 0 0 0 br0
192.168.20.0 * 255.255.255.0 U 0 0 0 br1
10.15.0.0 10.15.0.2 255.255.255.0 UG 0 0 0 tun21
***.***.***.*** * 255.255.252.0 U 0 0 0 vlan2
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default ip-***-***-***-*** 0.0.0.0 UG 0 0 0 vlan2
The client log says "Initialization Sequence Completed" nevertheless no client is listed as connected on the server-router.
Any help is appreciated!
