anthonywkho
Hi,
I am haveing huge trouble for two weeks trying to set up OpenVPN on my DD WRT flashed router (Netgear) and i have done a lot of research but still no luck. Below is the log and the setting of the server (DD WRT router ) and the client (windows 10 laptop) appreciate any help in here. Thanks
Tue Aug 08 19:31:56 2017 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 14 2017
Tue Aug 08 19:31:56 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Aug 08 19:31:56 2017 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Tue Aug 08 19:31:56 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Aug 08 19:31:56 2017 Need hold release from management interface, waiting...
Tue Aug 08 19:31:57 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Aug 08 19:31:57 2017 MANAGEMENT: CMD 'state on'
Tue Aug 08 19:31:57 2017 MANAGEMENT: CMD 'log all on'
Tue Aug 08 19:31:57 2017 MANAGEMENT: CMD 'echo all on'
Tue Aug 08 19:31:57 2017 MANAGEMENT: CMD 'hold off'
Tue Aug 08 19:31:57 2017 MANAGEMENT: CMD 'hold release'
Tue Aug 08 19:31:57 2017 MANAGEMENT: >STATE:1502191917,RESOLVE,,,,,,
Tue Aug 08 19:31:57 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:31:57 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Aug 08 19:31:57 2017 UDP link local: (not bound)
Tue Aug 08 19:31:57 2017 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:31:57 2017 MANAGEMENT: >STATE:1502191917,WAIT,,,,,,
Tue Aug 08 19:32:57 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 08 19:32:57 2017 TLS Error: TLS handshake failed
Tue Aug 08 19:32:57 2017 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 08 19:32:57 2017 MANAGEMENT: >STATE:1502191977,RECONNECTING,tls-error,,,,,
Tue Aug 08 19:32:57 2017 Restart pause, 5 second(s)
Tue Aug 08 19:33:02 2017 MANAGEMENT: >STATE:1502191982,RESOLVE,,,,,,
Tue Aug 08 19:33:02 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:33:02 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Aug 08 19:33:02 2017 UDP link local: (not bound)
Tue Aug 08 19:33:02 2017 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:33:02 2017 MANAGEMENT: >STATE:1502191982,WAIT,,,,,,
Tue Aug 08 19:34:03 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 08 19:34:03 2017 TLS Error: TLS handshake failed
Tue Aug 08 19:34:03 2017 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 08 19:34:03 2017 MANAGEMENT: >STATE:1502192043,RECONNECTING,tls-error,,,,,
Tue Aug 08 19:34:03 2017 Restart pause, 5 second(s)
Tue Aug 08 19:34:08 2017 MANAGEMENT: >STATE:1502192048,RESOLVE,,,,,,
Tue Aug 08 19:34:08 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:34:08 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Aug 08 19:34:08 2017 UDP link local: (not bound)
Tue Aug 08 19:34:08 2017 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:34:08 2017 MANAGEMENT: >STATE:1502192048,WAIT,,,,,,
Tue Aug 08 19:35:08 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 08 19:35:08 2017 TLS Error: TLS handshake failed
Tue Aug 08 19:35:08 2017 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 08 19:35:08 2017 MANAGEMENT: >STATE:1502192108,RECONNECTING,tls-error,,,,,
Tue Aug 08 19:35:08 2017 Restart pause, 5 second(s)
Tue Aug 08 19:35:13 2017 MANAGEMENT: >STATE:1502192113,RESOLVE,,,,,,
Tue Aug 08 19:35:13 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:35:13 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Aug 08 19:35:13 2017 UDP link local: (not bound)
Tue Aug 08 19:35:13 2017 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:35:13 2017 MANAGEMENT: >STATE:1502192113,WAIT,,,,,,
Tue Aug 08 19:36:13 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 08 19:36:13 2017 TLS Error: TLS handshake failed
Tue Aug 08 19:36:13 2017 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 08 19:36:13 2017 MANAGEMENT: >STATE:1502192173,RECONNECTING,tls-error,,,,,
Tue Aug 08 19:36:13 2017 Restart pause, 5 second(s)
Tue Aug 08 19:36:18 2017 MANAGEMENT: >STATE:1502192178,RESOLVE,,,,,,
Tue Aug 08 19:36:18 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:36:18 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Aug 08 19:36:18 2017 UDP link local: (not bound)
Tue Aug 08 19:36:18 2017 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Tue Aug 08 19:36:18 2017 MANAGEMENT: >STATE:1502192178,WAIT,,,,,,
Server setting
OpenVPN Server
OpenVPN Enable
Start Type WAN Up
System Config as Server
Server mode Router (TUN)
Network 10.1.1.0
Netmask 255.255.255.0
Port 1194
Tunnel Protocol UDP
Encryption Cipher Blowfish CBC
Hash Algorithm SHA
Advanced Options Diable
Public Server Cert
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
CA Cert
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
Private Server Key
-----BEGIN PRIVATE KEY-----
-----END DH PARAMETERS-----
Additional Config
push "dhcp-option DNS 10.1.1.1"
push "dhcp-option DOMAIN HOME"
push "route 10.8.0.0 255.255.255.0"
TLS Auth Key
Certificate Revoke List
OpenVPN Client
OpenVPN Client
Firewall
iptables -I INPUT 1 -p udp -dport 1194 -j ACCEPT
iptables -I FORWARD 1 -source 10.1.1.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.1.1.0/24 -j MASQUERADE
Client's setting
client
dev tun
proto udp
remote xx.xx.xx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
cert client.crt
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
key client.key
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
ns-cert-type server
verb 3
THANKS
