i've been stumbling with these settings the past few weeks, but i still cant get any internet access. i can connect to my server, but cant access the internet or anything else in the network. my normal network is at the 192.168.1.0 subnet.
In Bald(thick letters) at the end of the server status log, it says that a client(dont know which one) is connecting and then disconnecting, i dont know if this is a good thing or a bad thing. ?
could anyone explain to me if that's okay?
so my main problem is to get in the server from the 10.1.x.x network to the internet. if anyone would know how to fix this, he would be my hero! 🙂
this is my server status log:
Serverlog:
20151116 01:11:32 I OpenVPN 2.3.6 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 22 2014
20151116 01:11:32 I library versions: OpenSSL 1.0.1j 15 Oct 2014 LZO 2.08
20151116 01:11:32 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
20151116 01:11:32 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20151116 01:11:32 Diffie-Hellman initialized with 2048 bit key
20151116 01:11:32 Socket Buffers: R=[87380->131072] S=[16384->131072]
20151116 01:11:32 I TUN/TAP device tun0 opened
20151116 01:11:33 TUN/TAP TX queue length set to 100
20151116 01:11:33 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20151116 01:11:33 I /sbin/ifconfig tun0 10.1.1.1 netmask 255.255.255.0 mtu 1500 broadcast 10.1.1.255
20151116 01:11:33 I Listening for incoming TCP connection on [undef]
20151116 01:11:33 I TCPv4_SERVER link local (bound): [undef]
20151116 01:11:33 I TCPv4_SERVER link remote: [undef]
20151116 01:11:33 MULTI: multi_init called r=256 v=256
20151116 01:11:33 IFCONFIG POOL: base=10.1.1.2 size=252 ipv6=0
20151116 01:11:33 I ifconfig_pool_read() in='client1 10.1.1.2' TODO: IPv6
20151116 01:11:33 I succeeded -> ifconfig_pool_set()
20151116 01:11:33 IFCONFIG POOL LIST
20151116 01:11:33 client1 10.1.1.2
20151116 01:11:33 MULTI: TCP INIT maxclients=1024 maxevents=1028
20151116 01:11:33 I Initialization Sequence Completed
[b]20151116 01:11:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20151116 01:11:38 D MANAGEMENT: CMD 'state'
20151116 01:11:38 MANAGEMENT: Client disconnected [/b]
20151116 01:11:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20151116 01:11:38 D MANAGEMENT: CMD 'state'
20151116 01:11:38 MANAGEMENT: Client disconnected
20151116 01:11:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20151116 01:11:38 D MANAGEMENT: CMD 'state'
20151116 01:11:38 MANAGEMENT: Client disconnected
20151116 01:11:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20151116 01:11:38 D MANAGEMENT: CMD 'status 2'
20151116 01:11:38 MANAGEMENT: Client disconnected
20151116 01:11:38 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20151116 01:11:38 D MANAGEMENT: CMD 'log 500'
19700101 01:00:00
dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem keepalive 10 120 verb 3 mute 3 syslog writepid /var/run/openvpnd.pid management 127.0.0.1 14 management-log-cache 100 topology subnet script-security 2 port 443 proto tcp-server cipher aes-128-cbc auth sha1 client-connect /tmp/openvpn/clcon.sh client-disconnect /tmp/openvpn/cldiscon.sh client-config-dir /tmp/openvpn/ccd comp-lzo adaptive tls-server ifconfig-pool-persist /tmp/openvpn/ip-pool 86400 client-to-client push "redirect-gateway def1" tcp-nodelay tun-mtu 1500 mtu-disc yes server 10.1.1.0 255.255.255.0 dev tun2 tun-ipv6 push "route 192.168.1.0 255.255.255.0" push "dhcp-option DNS 8.8.8.8" push "redirect-gateway def1" server 10.1.1.0 255.255.255.0 dev tun0 proto tcp keepalive 10 120 dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem
this is my server additional config:
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
server 10.1.1.0 255.255.255.0
dev tun0
proto tcp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
this is my settings on my ddwrt
(or
http://imgur.com/fl6ePhd)
and my client config file
##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server. #
# #
# This configuration can be used by multiple #
# clients, however each client should have #
# its own cert and key files. #
# #
# On Windows, you might want to rename this #
# file so it has a .ovpn extension #
##############################################
client
;dev tap
dev tun
proto tcp
;proto udp
remote <my ip adress> 443 ;i've hidden mine ;)
resolv-retry infinite
float
persist-key
persist-tun
ca DDWRTBOX/ca.crt
cert DDWRTBOX/client1.crt
key DDWRTBOX/client1.key
remote-cert-tls server
cipher AES-128-CBC
comp-lzo
verb 3
route-delay 30
my log on the client side when i try to connect to the server:
Mon Nov 16 01:08:45 2015 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Mon Nov 16 01:08:45 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Enter Management Password:
Mon Nov 16 01:08:45 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25345
Mon Nov 16 01:08:45 2015 Need hold release from management interface, waiting...
Mon Nov 16 01:08:45 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25345
Mon Nov 16 01:08:45 2015 MANAGEMENT: CMD 'state on'
Mon Nov 16 01:08:45 2015 MANAGEMENT: CMD 'log all on'
Mon Nov 16 01:08:45 2015 MANAGEMENT: CMD 'hold off'
Mon Nov 16 01:08:45 2015 MANAGEMENT: CMD 'hold release'
Mon Nov 16 01:08:45 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Nov 16 01:08:45 2015 Attempting to establish TCP connection with [AF_INET]62.238.120.178:443 [nonblock]
Mon Nov 16 01:08:45 2015 MANAGEMENT: >STATE:1447632525,TCP_CONNECT,,,
Mon Nov 16 01:08:46 2015 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:443
Mon Nov 16 01:08:46 2015 TCPv4_CLIENT link local: [undef]
Mon Nov 16 01:08:46 2015 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:443
Mon Nov 16 01:08:46 2015 MANAGEMENT: >STATE:1447632526,WAIT,,,
Mon Nov 16 01:08:46 2015 MANAGEMENT: >STATE:1447632526,AUTH,,,
Mon Nov 16 01:08:46 2015 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:443, sid=9e834da2 147e1b0e
Mon Nov 16 01:08:48 2015 VERIFY OK: depth=1, C=NL, ST=ZEELAND, L=DOMBURG, O=OpenVPN, OU=DDWRTBOX, CN=DDWRTBOX, name=WDR3600, emailAddress=me@myhost.mydomain
Mon Nov 16 01:08:48 2015 Validating certificate key usage
Mon Nov 16 01:08:48 2015 ++ Certificate has key usage 00a0, expects 00a0
Mon Nov 16 01:08:48 2015 VERIFY KU OK
Mon Nov 16 01:08:48 2015 Validating certificate extended key usage
Mon Nov 16 01:08:48 2015 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Nov 16 01:08:48 2015 VERIFY EKU OK
Mon Nov 16 01:08:48 2015 VERIFY OK: depth=0, C=NL, ST=ZEELAND, L=DOMBURG, O=OpenVPN, OU=DDWRTBOX, CN=server, name=WDR3600, emailAddress=me@myhost.mydomain
Mon Nov 16 01:08:49 2015 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Nov 16 01:08:49 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 16 01:08:49 2015 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Nov 16 01:08:49 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 16 01:08:49 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Nov 16 01:08:49 2015 [server] Peer Connection Initiated with [AF_INET]62.238.120.178:443
Mon Nov 16 01:08:50 2015 MANAGEMENT: >STATE:1447632530,GET_CONFIG,,,
Mon Nov 16 01:08:51 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Nov 16 01:08:51 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 208.67.220.220,dhcp-option DNS 208.67.222.222,redirect-gateway def1,route-gateway 10.1.1.1,topology subnet,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.1.1.2 255.255.255.0'
Mon Nov 16 01:08:51 2015 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov 16 01:08:51 2015 OPTIONS IMPORT: --socket-flags option modified
Mon Nov 16 01:08:51 2015 OPTIONS IMPORT: --ifconfig/up options modified
Mon Nov 16 01:08:51 2015 OPTIONS IMPORT: route options modified
Mon Nov 16 01:08:51 2015 OPTIONS IMPORT: route-related options modified
Mon Nov 16 01:08:51 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Nov 16 01:08:51 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 16 01:08:51 2015 MANAGEMENT: >STATE:1447632531,ASSIGN_IP,,10.1.1.2,
Mon Nov 16 01:08:51 2015 open_tun, tt->ipv6=0
Mon Nov 16 01:08:51 2015 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{29C02528-AE8D-48C8-9530-2C107C007EBB}.tap
Mon Nov 16 01:08:51 2015 TAP-Windows Driver Version 9.21
Mon Nov 16 01:08:51 2015 Set TAP-Windows TUN subnet mode network/local/netmask = 10.1.1.0/10.1.1.2/255.255.255.0 [SUCCEEDED]
Mon Nov 16 01:08:51 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.1.1.2/255.255.255.0 on interface {29C02528-AE8D-48C8-9530-2C107C007EBB} [DHCP-serv: 10.1.1.254, lease-time: 31536000]
Mon Nov 16 01:08:51 2015 Successful ARP Flush on interface [9] {29C02528-AE8D-48C8-9530-2C107C007EBB}
Mon Nov 16 01:08:56 2015 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Mon Nov 16 01:08:56 2015 C:\WINDOWS\system32\route.exe ADD xxx.xxx.xxx.xxx MASK 255.255.255.255 192.168.43.1
Mon Nov 16 01:08:56 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Mon Nov 16 01:08:56 2015 Route addition via IPAPI succeeded [adaptive]
Mon Nov 16 01:08:56 2015 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.1.1.1
Mon Nov 16 01:08:56 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Nov 16 01:08:56 2015 Route addition via IPAPI succeeded [adaptive]
Mon Nov 16 01:08:56 2015 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.1.1.1
Mon Nov 16 01:08:56 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Nov 16 01:08:56 2015 Route addition via IPAPI succeeded [adaptive]
Mon Nov 16 01:08:56 2015 Initialization Sequence Completed
Mon Nov 16 01:08:56 2015 MANAGEMENT: >STATE:1447632536,CONNECTED,SUCCESS,10.1.1.2,xxx.xxx.xxx.xxx
hope i provided everything!
