Cannot connect to VPN

R1CH4RD21

Hi,

I have followed this tutorial http://readwrite.com/2014/04/10/raspberry-pi-vpn-tutorial-server-secure-web-browsing, but am having problems connecting to my VPN.

When i try to connect through either my laptop or Android phone it gets stuck on "looking up DNS name" and finally says "connection timed out" my config file is as follows:

local 192.168.0.51 # SWAP THIS NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
dev tun
proto tcp #Some people prefer to use tcp. Don't change it if you don't know.
port 433
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/VPNserver.crt # SWAP WITH YOUR CRT NAME
key /etc/openvpn/easy-rsa/keys/VPNserver.key # SWAP WITH YOUR KEY NAME
dh /etc/openvpn/easy-rsa/keys/dh1024.pem # If you changed to 2048, change that$
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 192.168.0.51 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBER$
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 192.168.0.1" # This should already match your router add$
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1

My server name is VPNserver yet i have named my config file server.conf, will this affect it?

A bit more information about my setup in case it is required is that i am using a DDNS rather than a static public IP, and i am using tcp 433 rather than udp 1194 due to router restrictions.

Thanks in advance

Richard

Traffic

R1CH4RD21 wrote# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 192.168.0.1" # This should already match your router add$

Looks like your router does not do DNS ..

R1CH4RD21

Thanks for your reply.

I can connect to the pi through SSH using a different port but the same DNS and router, would this be possible if my router didn't support DNS?

The script in my first post was copied from the tutorial so the piece of code could be generic.

Thanks
Richard

R1CH4RD21

Traffic wrote
R1CH4RD21 wrote# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 192.168.0.1" # This should already match your router add$
Looks like your router does not do DNS ..

Hi,

Thanks for taking the time to help, the text which I quoted in my original post is generic and copy and pasted (with the necessary bit changed) from the tutorial metioned. I can connect to my raspberry pi which is running the VPN over SSH using the same DNS but through a different port, would it still be possible that my router does not to DNS?

Does the config file name need to be the same as the VPN sever name?

Thanks
Richard

R1CH4RD21

I have changed my DNS to googles public service and still get the message "resolving domain name" my new config file is as follows:

local 192.168.0.51 # SWAP THIS NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
dev tun
proto tcp #Some people prefer to use tcp. Don't change it if you don't know.
port 433
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/VPNserver.crt # SWAP WITH YOUR CRT NAME
key /etc/openvpn/easy-rsa/keys/VPNserver.key # SWAP WITH YOUR KEY NAME
dh /etc/openvpn/easy-rsa/keys/dh1024.pem # If you changed to 2048, change that here!
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 192.168.0.51 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
 # This should already match your router address and not need to be changed.
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1

Traffic

Have you read this ?