Problem trying to get simple, static key example to work

smachin

Hi, first time using open VPN, trying to key the static key example to work. One machine, the server, is Ubuntu 14.04 running as a VirtualBox VM inside Windows 7 Professional. This machine is at my house.

The client is an ARM based BusyBox Linux system. This is located in my work office. To get that to work I had to enable CONFIG_NET_IPIP in the kernel config. & rebuild it to get the tun interface to show up, and also include openvpn in the BusyBox build, but that was fairly straight forward.

I first logged into the virtual machine and generated the static key as per the instructions, then copied this key to the client. I then created an openvpn_server.conf file with these contents:

dev tun
ifconfig 10.8.0.1 10.8.0.2
secret static.key
keepalive 10 60
ping-timer-rem
persist-tun
persist-key

The openvpn_client.conf file is:

remote remoteacceesstest.com
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key
keepalive 10 60
ping-timer-rem
persist-tun
persist-key

iptables is not running on the remote busybox Linux machine, and has no rules setup on the Ubuntu server machine. I start up the server on the Ubuntu machine and get this output:

smachin@smachin-VirtualBox:~$ sudo openvpn --config openvpn_server.conf
Sun Mar 6 13:49:27 2016 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
Sun Mar 6 13:49:27 2016 TUN/TAP device tun0 opened
Sun Mar 6 13:49:27 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Mar 6 13:49:27 2016 /sbin/ip link set dev tun0 up mtu 1500
Sun Mar 6 13:49:27 2016 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Mar 6 13:49:27 2016 UDPv4 link local (bound): [undef]
Sun Mar 6 13:49:27 2016 UDPv4 link remote: [undef]

On the client side, I start up openvpn and get this:

sudo openvpn --config openvpn_client.conf
Sun Mar 6 21:51:03 2016 OpenVPN 2.2.2 arm-buildroot-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Mar 4 2016
Sun Mar 6 21:51:03 2016 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Mar 6 21:51:03 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Mar 6 21:51:03 2016 RESOLVE: NOTE: solarcity.com resolves to 2 addresses
Sun Mar 6 21:51:03 2016 TUN/TAP device tun0 opened
Sun Mar 6 21:51:03 2016 /sbin/ifconfig tun0 10.8.0.2 pointopoint 10.8.0.1 mtu 1500
Sun Mar 6 21:51:03 2016 UDPv4 link local (bound): [undef]:1194
Sun Mar 6 21:51:03 2016 UDPv4 link remote: 192.230.66.86:1194

After all this is running, I cannot ping 10.8.0.2 from 10.8.0.1 or visa versa. The client machine is located in my office, and I don't know what kind of firewall rules or other security measures are running on the network there.

Can anyone suggest how to get this working?

Traffic

Did you setup port-forwarding ?

smachin

Have not setup port forwarding yet, what are the steps?

Traffic

smachin wrotethe server, is Ubuntu 14.04 running as a VirtualBox VM inside Windows 7 Professional. This machine is at my house.

See the manual for the router at your house ..

smachin wrote The client machine is located in my office, and I don't know what kind of firewall rules or other security measures are running on the network there.

Well .. then you probably do not have permission to do this .. expect it not to work 🙁

smachin

Thanks for the helpful responses. I was able to get my setup to work, just had to use a server that was connected to the public internet.