Hi All,
New to the forum, so excuse my newbie-ness..
Situation is this I have a test lab in 2 locations. both have been setup with a vms that i can connect to via RDP (using a dynamic DNS sevice). I want to be able to connect to them using vpn.
What I'm trying to achieve is a VM that i can connect to and possible extend my testlab. Below shows the settings i configured using pfsense
Client .OVPN file:
client
dev tun
proto udp
remote <IP from ISP> 1194
ping 10
resolv-retry infinite
nobind
persist-key
persist-tun
#keys
ca <internal-CA>.crt
cert <MyUser>.crt
key <MyUser>.key
#security
comp-lzo
pull
verb 3
auth-user-pass
cipher AES-128-CBC
LOG FILE:
Fri May 29 10:13:09 2015 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011
Enter Auth Password:
Fri May 29 10:13:18 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Fri May 29 10:13:18 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 29 10:13:18 2015 LZO compression initialized
Fri May 29 10:13:18 2015 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 29 10:13:18 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri May 29 10:13:18 2015 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 29 10:13:18 2015 Local Options hash (VER=V4): '66096c33'
Fri May 29 10:13:18 2015 Expected Remote Options hash (VER=V4): '691e95c7'
Fri May 29 10:13:18 2015 UDPv4 link local: [undef]
Fri May 29 10:13:18 2015 UDPv4 link remote: <IP FROM ISP>:1194
Fri May 29 10:14:18 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri May 29 10:14:18 2015 TLS Error: TLS handshake failed
Fri May 29 10:14:18 2015 TCP/UDP: Closing socket
Fri May 29 10:14:18 2015 SIGUSR1[soft,tls-error] received, process restarting
Fri May 29 10:14:18 2015 Restart pause, 2 second(s)
Fri May 29 10:14:20 2015 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Fri May 29 10:14:20 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 29 10:14:20 2015 Re-using SSL/TLS context
Fri May 29 10:14:20 2015 LZO compression initialized
Fri May 29 10:14:20 2015 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 29 10:14:20 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri May 29 10:14:20 2015 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 29 10:14:20 2015 Local Options hash (VER=V4): '66096c33'
Fri May 29 10:14:20 2015 Expected Remote Options hash (VER=V4): '691e95c7'
Fri May 29 10:14:20 2015 UDPv4 link local: [undef]
Fri May 29 10:14:20 2015 UDPv4 link remote: <IP FROM ISP>:1194
This keeps looping.
Server settings:
Server Mode: Remote Access
UDP
tun
WAN
1194
TLS Auth: enable auth of TLS packets
Peer certificate Authority: <Internal CA>
Server Cert: <ServerCertificate> (CA: <Internal CA>)* In use
IPv4 Tunnel 192.168.100.0 /24
Force all client traffic through tunnel [checked]
Dynamic IP [checked]
Address Pool [checked]
(I've edited my IP and certs/key names out, for this post)
any suggestions?
also tried with these setting from the export util:
dev tun
persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote <IP FROM ISP> 1194 udp
lport 0
verify-x509-name "opvn.home" name
auth-user-pass
pkcs12 pfSense-udp-1194-VPNUser.p12
tls-auth pfSense-udp-1194-VPNUser-tls.key 1
ns-cert-type server
comp-lzo
(Tried the above with the random local port...still does not work)
