kbullis
I am a new user, attempting to set up a VPN. Server seems to start up appropriately but cannot connect. I am able to ping the ip address of the router.
Follows are my config files and server and client logs. I would appreciate any help you can offer.
Attempting to access a windows 10 server behind a ubiquiti router. I have port 1194 forwarded to 192.168.1.105. Server is assigned a static IP address of 192.168.1.105.
Server running windows 10 pro, version 1709 build 16299.192
Server running windows defender with rules in place to accept incoming UDP and TCP packets on port 1194.
Client is running Windows 10 Pro Version 1709, build 16299.192
port 1194
proto udp
dev tun
ca "c:\\keys\\ca.crt"
cert "c:\\keys\\server.crt"
key "c:\\keys\\server.key"
dh "c:\\keys\\dh4096.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
client
dev tun
proto udp
remote izzy.selfip.net 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "c:\\keys\\ca.crt"
cert "c:\\keys\\client1.crt"
key "c:\\keys\\client1.key"
remote-cert-tls server
cipher AES-256-CBC
verb 3
Server Log:
Sat Feb 03 23:35:14 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Sat Feb 03 23:35:14 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Sat Feb 03 23:35:14 2018 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Sat Feb 03 23:35:14 2018 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat Feb 03 23:35:14 2018 Need hold release from management interface, waiting...
Sat Feb 03 23:35:14 2018 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat Feb 03 23:35:14 2018 MANAGEMENT: CMD 'state on'
Sat Feb 03 23:35:14 2018 MANAGEMENT: CMD 'log all on'
Sat Feb 03 23:35:14 2018 MANAGEMENT: CMD 'echo all on'
Sat Feb 03 23:35:14 2018 MANAGEMENT: CMD 'hold off'
Sat Feb 03 23:35:14 2018 MANAGEMENT: CMD 'hold release'
Sat Feb 03 23:35:14 2018 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Feb 03 23:35:14 2018 Diffie-Hellman initialized with 4096 bit key
Sat Feb 03 23:35:14 2018 interactive service msg_channel=624
Sat Feb 03 23:35:14 2018 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=15 HWADDR=1c:1b:0d:ec:36:cd
Sat Feb 03 23:35:14 2018 open_tun
Sat Feb 03 23:35:14 2018 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{1BE80E9C-4E1E-4727-AC04-FC1653BC9F93}.tap
Sat Feb 03 23:35:14 2018 TAP-Windows Driver Version 9.21
Sat Feb 03 23:35:14 2018 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {1BE80E9C-4E1E-4727-AC04-FC1653BC9F93} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sat Feb 03 23:35:14 2018 Sleeping for 10 seconds...
Sat Feb 03 23:35:24 2018 Successful ARP Flush on interface [5] {1BE80E9C-4E1E-4727-AC04-FC1653BC9F93}
Sat Feb 03 23:35:24 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Feb 03 23:35:24 2018 MANAGEMENT: >STATE:1517718924,ASSIGN_IP,,10.8.0.1,,,,
Sat Feb 03 23:35:24 2018 MANAGEMENT: >STATE:1517718924,ADD_ROUTES,,,,,,
Sat Feb 03 23:35:24 2018 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sat Feb 03 23:35:24 2018 Route addition via service succeeded
Sat Feb 03 23:35:24 2018 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Sat Feb 03 23:35:24 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Feb 03 23:35:24 2018 setsockopt(IPV6_V6ONLY=0)
Sat Feb 03 23:35:24 2018 UDPv6 link local (bound): [AF_INET6][undef]:1194
Sat Feb 03 23:35:24 2018 UDPv6 link remote: [AF_UNSPEC]
Sat Feb 03 23:35:24 2018 MULTI: multi_init called, r=256 v=256
Sat Feb 03 23:35:24 2018 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Feb 03 23:35:24 2018 IFCONFIG POOL LIST
Sat Feb 03 23:35:24 2018 Initialization Sequence Completed
Sat Feb 03 23:35:24 2018 MANAGEMENT: >STATE:1517718924,CONNECTED,SUCCESS,10.8.0.1,,,,
Client Log;
Tue Feb 06 15:42:24 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Tue Feb 06 15:42:24 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Feb 06 15:42:24 2018 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Tue Feb 06 15:42:24 2018 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Feb 06 15:42:24 2018 Need hold release from management interface, waiting...
Tue Feb 06 15:42:24 2018 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Feb 06 15:42:24 2018 MANAGEMENT: CMD 'state on'
Tue Feb 06 15:42:24 2018 MANAGEMENT: CMD 'log all on'
Tue Feb 06 15:42:25 2018 MANAGEMENT: CMD 'echo all on'
Tue Feb 06 15:42:25 2018 MANAGEMENT: CMD 'hold off'
Tue Feb 06 15:42:25 2018 MANAGEMENT: CMD 'hold release'
Tue Feb 06 15:42:25 2018 MANAGEMENT: >STATE:1517949745,RESOLVE,,,,,,
Tue Feb 06 15:42:25 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:42:25 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 06 15:42:25 2018 UDP link local: (not bound)
Tue Feb 06 15:42:25 2018 UDP link remote: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:42:25 2018 MANAGEMENT: >STATE:1517949745,WAIT,,,,,,
Tue Feb 06 15:43:25 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 06 15:43:25 2018 TLS Error: TLS handshake failed
Tue Feb 06 15:43:25 2018 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 06 15:43:25 2018 MANAGEMENT: >STATE:1517949805,RECONNECTING,tls-error,,,,,
Tue Feb 06 15:43:25 2018 Restart pause, 5 second(s)
Tue Feb 06 15:43:30 2018 MANAGEMENT: >STATE:1517949810,RESOLVE,,,,,,
Tue Feb 06 15:43:30 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:43:30 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 06 15:43:30 2018 UDP link local: (not bound)
Tue Feb 06 15:43:30 2018 UDP link remote: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:43:30 2018 MANAGEMENT: >STATE:1517949810,WAIT,,,,,,
Tue Feb 06 15:44:30 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 06 15:44:30 2018 TLS Error: TLS handshake failed
Tue Feb 06 15:44:30 2018 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 06 15:44:30 2018 MANAGEMENT: >STATE:1517949870,RECONNECTING,tls-error,,,,,
Tue Feb 06 15:44:30 2018 Restart pause, 5 second(s)
Tue Feb 06 15:44:35 2018 MANAGEMENT: >STATE:1517949875,RESOLVE,,,,,,
Tue Feb 06 15:44:35 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:44:35 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 06 15:44:35 2018 UDP link local: (not bound)
Tue Feb 06 15:44:35 2018 UDP link remote: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:44:35 2018 MANAGEMENT: >STATE:1517949875,WAIT,,,,,,
Tue Feb 06 15:45:36 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 06 15:45:36 2018 TLS Error: TLS handshake failed
Tue Feb 06 15:45:36 2018 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 06 15:45:36 2018 MANAGEMENT: >STATE:1517949936,RECONNECTING,tls-error,,,,,
Tue Feb 06 15:45:36 2018 Restart pause, 5 second(s)
Tue Feb 06 15:45:41 2018 MANAGEMENT: >STATE:1517949941,RESOLVE,,,,,,
Tue Feb 06 15:45:41 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:45:41 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 06 15:45:41 2018 UDP link local: (not bound)
Tue Feb 06 15:45:41 2018 UDP link remote: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:45:41 2018 MANAGEMENT: >STATE:1517949941,WAIT,,,,,,
Tue Feb 06 15:46:41 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 06 15:46:41 2018 TLS Error: TLS handshake failed
Tue Feb 06 15:46:41 2018 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 06 15:46:41 2018 MANAGEMENT: >STATE:1517950001,RECONNECTING,tls-error,,,,,
Tue Feb 06 15:46:41 2018 Restart pause, 5 second(s)
Tue Feb 06 15:46:46 2018 MANAGEMENT: >STATE:1517950006,RESOLVE,,,,,,
Tue Feb 06 15:46:46 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:46:46 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 06 15:46:46 2018 UDP link local: (not bound)
Tue Feb 06 15:46:46 2018 UDP link remote: [AF_INET]67.241.68.241:1194
Tue Feb 06 15:46:46 2018 MANAGEMENT: >STATE:1517950006,WAIT,,,,,,
Tue Feb 06 15:47:34 2018 SIGTERM[hard,] received, process exiting
Tue Feb 06 15:47:34 2018 MANAGEMENT: >STATE:1517950054,EXITING,SIGTERM,,,,,
