hdcad
HI Gay,
who can help me, I attached the server.opvn,and client.open. server.open can connect ,but client always have this information:
thank you very much!
Wed Nov 08 12:58:13 2017 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Wed Nov 08 12:58:13 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Nov 08 12:58:13 2017 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Wed Nov 08 12:58:13 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Nov 08 12:58:13 2017 Need hold release from management interface, waiting...
Wed Nov 08 12:58:13 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Nov 08 12:58:13 2017 MANAGEMENT: CMD 'state on'
Wed Nov 08 12:58:13 2017 MANAGEMENT: CMD 'log all on'
Wed Nov 08 12:58:13 2017 MANAGEMENT: CMD 'echo all on'
Wed Nov 08 12:58:13 2017 MANAGEMENT: CMD 'hold off'
Wed Nov 08 12:58:13 2017 MANAGEMENT: CMD 'hold release'
Wed Nov 08 12:58:13 2017 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Nov 08 12:58:13 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 08 12:58:13 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 08 12:58:13 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.1.2:2350
Wed Nov 08 12:58:13 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Nov 08 12:58:13 2017 UDP link local: (not bound)
Wed Nov 08 12:58:13 2017 UDP link remote: [AF_INET]192.168.1.2:2350
Wed Nov 08 12:58:13 2017 MANAGEMENT: >STATE:1510117093,WAIT,,,,,,
Wed Nov 08 12:58:13 2017 read UDP: Unknown error (code=10054)
Wed Nov 08 12:58:15 2017 read UDP: Unknown error (code=10054)
server.opvn:
local 192.168.1.2 #指定监听的本机IP(因为有些计算机具备多个IP地址)，该命令是可选的，默认监听所有IP地址。
port 2350 #指定监听的本机端口号
proto udp #指定采用的传输协议，可以选择tcp或udp
dev tun #指定创建的通信隧道类型，可选tun或tap
ca ca.crt #指定CA证书的文件路径
cert server.crt #指定服务器端的证书文件路径
key server.key #指定服务器端的私钥文件路径
dh dh4096.pem #指定迪菲赫尔曼参数的文件路径
server 10.0.0.0 255.255.255.0 #指定虚拟局域网占用的IP地址段和子网掩码，此处配置的服务器自身占用10.0.0.1。
ifconfig-pool-persist ipp.txt #服务器自动给客户端分配IP后，客户端下次连接时，仍然采用上次的IP地址(第一次分配的IP保存在ipp.txt中，下一次分配其中保存的IP)。
tls-auth ta.key 0 #开启TLS-auth，使用ta.key防御攻击。服务器端的第二个参数值为0，客户端的为1。
keepalive 10 120 #每10秒ping一次，连接超时时间设为120秒。
comp-lzo #开启VPN连接压缩，如果服务器端开启，客户端也必须开启
client-to-client #允许客户端与客户端相连接，默认情况下客户端只能与服务器相连接
persist-key
persist-tun #持久化选项可以尽量避免访问在重启时由于用户权限降低而无法访问的某些资源。
status openvpn-status.log #指定记录OpenVPN状态的日志文件路径
verb 3 #指定日志文件的记录详细级别，可选0-9，等级越高日志内容越详细
client.open:
client
dev tap0
dev-node HAW
proto udp
remote 192.168.1.2 2350
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3
tls-auth ta.key 1
auth-nocache
