Hi all,
I have set up a new OpenVPN Server on a new Raspberry PI (on port 1195 since the other OpenVPN Server is still running). Now I am able to connect to the OpenVPN Server via my IPhone (using the OpenVPN APP) but I am not able to route the internet traffic via this server. When I am trying to comunicate to the internet I am not getting any respone.
Please find attached my configurations:
### Paste Your Server Config File Below ### server 10.8.0.0 255.255.255.0 # This is a private IP address which # can *not* be used to hack your network verb 4 # Make sure to use --verb 4 etc ...
dev tun
tun-ipv6
proto udp6
port 1195
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
client-to-client
push "redirect-gateway def1 bypass-dhcp"
#set the dns servers
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
log-append /var/log/openvpn
comp-lzo
duplicate-cn
keepalive 10 120
# Server Log
Fri Sep 15 14:51:48 2017 FAKE_ID TLS: Initial packet from [AF_INET6]::ffff:FAKE_ID:0815, sid=a99f2b37 cf7a27ae
Fri Sep 15 14:51:51 2017 FAKE_ID VERIFY OK: depth=1, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Sep 15 14:51:51 2017 FAKE_ID VERIFY OK: depth=0, C=DE, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=ipv6_iphone, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_GUI_VER=net.openvpn.connect.ios_1.1.1-212
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_VER=3.1.2
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_PLAT=ios
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_NCP=2
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_TCPNL=1
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_PROTO=2
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_LZO=1
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_AUTO_SESS=1
Fri Sep 15 14:51:51 2017 FAKE_ID peer info: IV_BS64DL=1
Fri Sep 15 14:51:51 2017 FAKE_ID Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Sep 15 14:51:51 2017 FAKE_ID [ipv6_iphone] Peer Connection Initiated with [AF_INET6]::ffff:FAKE_ID:28272
Fri Sep 15 14:51:51 2017 ipv6_iphone/FAKE_ID MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Fri Sep 15 14:51:51 2017 ipv6_iphone/FAKE_ID MULTI: Learn: 10.8.0.6 -> ipv6_iphone/FAKE_ID
Fri Sep 15 14:51:51 2017 ipv6_iphone/FAKE_ID MULTI: primary virtual IP for ipv6_iphone/FAKE_ID: 10.8.0.6
Fri Sep 15 14:51:52 2017 ipv6_iphone/FAKE_ID PUSH: Received control message: 'PUSH_REQUEST'
Fri Sep 15 14:51:52 2017 ipv6_iphone/FAKE_ID SENT CONTROL [ipv6_iphone]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM' (status=1)
Fri Sep 15 14:51:52 2017 ipv6_iphone/FAKE_ID Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Sep 15 14:51:52 2017 ipv6_iphone/FAKE_ID Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Sep 15 14:51:52 2017 ipv6_iphone/FAKE_ID PUSH: Received control message: 'PUSH_REQUEST'
Fri Sep 15 14:53:33 2017 ipv6_iphone/FAKE_ID SIGTERM[soft,remote-exit] received, client-instance exiting
### Paste Your Client Config Below ### client remote x.x.x.x # Please remove the public IP # of your server ! verb 4 # Make sure to use --verb 4 etc ...
dev tun
client
proto udp6
remote {my DynDNS Server} 1195
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert ipv6_iphone.crt
key ipv6_iphone.key
comp-lzo
verb 3
Log from OpenVPN App
2017-09-15 16:51:52 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: SHA1
compress: LZO
peer ID: 0
2017-09-15 16:51:52 EVENT: ASSIGN_IP
2017-09-15 16:51:53 Connected via tun
2017-09-15 16:51:53 LZO-ASYM init swap=0 asym=0
2017-09-15 16:51:53 EVENT: CONNECTED @{MY DynDNS Server}:1195 (my IP Address) via /UDPv4 on tun/10.8.0.6/ gw=[10.8.0.5/]
2017-09-15 16:51:53 SetStatus Connected
2017-09-15 16:53:33 OS Event: SLEEP
2017-09-15 16:53:33 TUN reassert
2017-09-15 16:53:33 TUN reset routes
2017-09-15 16:53:33 EVENT: PAUSE
2017-09-15 16:57:48 OS Event: WAKEUP
2017-09-15 16:57:51 RESUME TEST: Internet:ReachableViaWiFi/-R t------
2017-09-15 16:57:51 EVENT: RESUME
2017-09-15 16:57:51 EVENT: RECONNECTING
2017-09-15 16:57:51 EVENT: RESOLVE
2017-09-15 16:57:51 Contacting (my IP Address):1195 via UDP
2017-09-15 16:57:51 EVENT: WAIT
2017-09-15 16:57:51 SetTunnelSocket returned 1
2017-09-15 16:57:51 Connecting to [{MY DynDNS Server}]:1195 (my IP Address) via UDPv4
2017-09-15 16:57:59 EVENT: DISCONNECTED
2017-09-15 16:57:59 Raw stats on disconnect:
BYTES_IN : 4590
BYTES_OUT : 11670
PACKETS_IN : 22
PACKETS_OUT : 128
TUN_BYTES_IN : 6384
TUN_PACKETS_IN : 98
N_PAUSE : 1
N_RECONNECT : 1
2017-09-15 16:57:59 Performance stats on disconnect:
CPU usage (microseconds): 120774
Tunnel compression ratio (downlink): inf
Network bytes per CPU second: 134631
Tunnel bytes per CPU second: 52859
2017-09-15 16:57:59 ----- OpenVPN Stop -----
Better now? Do weed need verb 4 for better log information?
