Hi there
Im trying to setup an OpenVPN session on a Mikrotik router, and it just wont connect. Hoping someone can see what my issue is.
TIA
My Log
Sun May 10 17:23:24 2020 us=483729 Current Parameter Settings:
Sun May 10 17:23:24 2020 us=483729 config = 'WHM_WiFi.ovpn'
Sun May 10 17:23:24 2020 us=483729 mode = 0
Sun May 10 17:23:24 2020 us=483729 show_ciphers = DISABLED
Sun May 10 17:23:24 2020 us=483729 show_digests = DISABLED
Sun May 10 17:23:24 2020 us=483729 show_engines = DISABLED
Sun May 10 17:23:24 2020 us=483729 genkey = DISABLED
Sun May 10 17:23:24 2020 us=483729 key_pass_file = '[UNDEF]'
Sun May 10 17:23:24 2020 us=483729 show_tls_ciphers = DISABLED
Sun May 10 17:23:24 2020 us=483729 connect_retry_max = 0
Sun May 10 17:23:24 2020 us=483729 NOTE: --mute triggered...
Sun May 10 17:23:24 2020 us=483729 283 variation(s) on previous 10 message(s) suppressed by --mute
Sun May 10 17:23:24 2020 us=483729 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Sun May 10 17:23:24 2020 us=483729 Windows version 6.1 (Windows 7) 64bit
Sun May 10 17:23:24 2020 us=483729 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Enter Management Password:
Sun May 10 17:23:24 2020 us=483729 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Sun May 10 17:23:24 2020 us=483729 Need hold release from management interface, waiting...
Sun May 10 17:23:24 2020 us=958730 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Sun May 10 17:23:25 2020 us=58730 MANAGEMENT: CMD 'state on'
Sun May 10 17:23:25 2020 us=58730 MANAGEMENT: CMD 'log all on'
Sun May 10 17:23:25 2020 us=78730 MANAGEMENT: CMD 'echo all on'
Sun May 10 17:23:25 2020 us=79730 MANAGEMENT: CMD 'bytecount 5'
Sun May 10 17:23:25 2020 us=80730 MANAGEMENT: CMD 'hold off'
Sun May 10 17:23:25 2020 us=81730 MANAGEMENT: CMD 'hold release'
Sun May 10 17:23:25 2020 us=95731 MANAGEMENT: CMD 'password [...]'
Sun May 10 17:23:25 2020 us=105731 PRNG init md=SHA1 size=36
Sun May 10 17:23:25 2020 us=105731 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun May 10 17:23:25 2020 us=105731 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun May 10 17:23:25 2020 us=105731 NOTE: --mute triggered...
Sun May 10 17:23:25 2020 us=105731 2 variation(s) on previous 10 message(s) suppressed by --mute
Sun May 10 17:23:25 2020 us=105731 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Sun May 10 17:23:25 2020 us=105731 MTU DYNAMIC mtu=1450, flags=2, 1623 -> 1450
Sun May 10 17:23:25 2020 us=105731 MANAGEMENT: >STATE:1589149405,RESOLVE,,,,,,
Sun May 10 17:23:25 2020 us=105731 GETADDRINFO flags=0x0101 ai_family=0 ai_socktype=1
Sun May 10 17:23:25 2020 us=265731 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=0
Sun May 10 17:23:25 2020 us=265731 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Sun May 10 17:23:25 2020 us=265731 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Sun May 10 17:23:25 2020 us=265731 calc_options_string_link_mtu: link-mtu 1623 -> 1559
Sun May 10 17:23:25 2020 us=265731 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Sun May 10 17:23:25 2020 us=265731 calc_options_string_link_mtu: link-mtu 1623 -> 1559
Sun May 10 17:23:25 2020 us=265731 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sun May 10 17:23:25 2020 us=265731 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sun May 10 17:23:25 2020 us=265731 TCP/UDP: Preserving recently used remote address: [AF_INET]100.100.100.100:1194
Sun May 10 17:23:25 2020 us=265731 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun May 10 17:23:25 2020 us=265731 Attempting to establish TCP connection with [AF_INET]100.100.100.100:1194 [nonblock]
Sun May 10 17:23:25 2020 us=265731 MANAGEMENT: >STATE:1589149405,TCP_CONNECT,,,,,,
Sun May 10 17:23:26 2020 us=270734 TCP connection established with [AF_INET]100.100.100.100:1194
Sun May 10 17:23:26 2020 us=270734 TCP_CLIENT link local: (not bound)
Sun May 10 17:23:26 2020 us=270734 TCP_CLIENT link remote: [AF_INET]100.100.100.100:1194
Sun May 10 17:23:26 2020 us=270734 MANAGEMENT: >STATE:1589149406,WAIT,,,,,,
Sun May 10 17:23:26 2020 us=270734 TCP_CLIENT WRITE [14] to [AF_INET]100.100.100.100:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 10 17:23:26 2020 us=270734 TCP_CLIENT READ [14] from [AF_INET]100.100.100.100:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 10 17:23:26 2020 us=270734 MANAGEMENT: >STATE:1589149406,AUTH,,,,,,
Sun May 10 17:23:26 2020 us=270734 TLS: Initial packet from [AF_INET]100.100.100.100:1194, sid=f5962658 0917af95
Sun May 10 17:23:26 2020 us=270734 TCP_CLIENT WRITE [26] to [AF_INET]100.100.100.100:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sun May 10 17:23:26 2020 us=310734 TCP_CLIENT READ [22] from [AF_INET]100.100.100.100:1194: P_ACK_V1 kid=0 [ 0 ]
Sun May 10 17:23:26 2020 us=310734 TCP_CLIENT WRITE [174] to [AF_INET]100.100.100.100:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=160
Sun May 10 17:23:26 2020 us=330734 Connection reset, restarting [0]
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 TCP/UDP: Closing socket
Sun May 10 17:23:26 2020 us=330734 PID packet_id_free
Sun May 10 17:23:26 2020 us=330734 SIGUSR1[soft,connection-reset] received, process restarting
Sun May 10 17:23:26 2020 us=330734 MANAGEMENT: >STATE:1589149406,RECONNECTING,connection-reset,,,,,
Sun May 10 17:23:26 2020 us=330734 Restart pause, 5 second(s)
Sun May 10 17:23:31 2020 us=347746 Re-using SSL/TLS context
Sun May 10 17:23:31 2020 us=347746 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun May 10 17:23:31 2020 us=347746 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun May 10 17:23:31 2020 us=347746 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun May 10 17:23:31 2020 us=347746 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun May 10 17:23:31 2020 us=347746 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Sun May 10 17:23:31 2020 us=347746 MTU DYNAMIC mtu=1450, flags=2, 1623 -> 1450
Sun May 10 17:23:31 2020 us=347746 MANAGEMENT: >STATE:1589149411,RESOLVE,,,,,,
Sun May 10 17:23:31 2020 us=347746 GETADDRINFO flags=0x0101 ai_family=0 ai_socktype=1
Sun May 10 17:23:31 2020 us=347746 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=0
Sun May 10 17:23:31 2020 us=347746 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Sun May 10 17:23:31 2020 us=347746 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Sun May 10 17:23:31 2020 us=347746 calc_options_string_link_mtu: link-mtu 1623 -> 1559
Sun May 10 17:23:31 2020 us=347746 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Sun May 10 17:23:31 2020 us=347746 calc_options_string_link_mtu: link-mtu 1623 -> 1559
Sun May 10 17:23:31 2020 us=347746 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sun May 10 17:23:31 2020 us=347746 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sun May 10 17:23:31 2020 us=347746 TCP/UDP: Preserving recently used remote address: [AF_INET]100.100.100.100:1194
Sun May 10 17:23:31 2020 us=347746 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun May 10 17:23:31 2020 us=347746 Attempting to establish TCP connection with [AF_INET]100.100.100.100:1194 [nonblock]
Sun May 10 17:23:31 2020 us=347746 MANAGEMENT: >STATE:1589149411,TCP_CONNECT,,,,,,
Sun May 10 17:23:32 2020 us=353748 TCP connection established with [AF_INET]100.100.100.100:1194
Sun May 10 17:23:32 2020 us=353748 TCP_CLIENT link local: (not bound)
Sun May 10 17:23:32 2020 us=353748 TCP_CLIENT link remote: [AF_INET]100.100.100.100:1194
Sun May 10 17:23:32 2020 us=353748 MANAGEMENT: >STATE:1589149412,WAIT,,,,,,
Sun May 10 17:23:32 2020 us=353748 TCP_CLIENT WRITE [14] to [AF_INET]100.100.100.100:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 10 17:23:32 2020 us=353748 TCP_CLIENT READ [14] from [AF_INET]100.100.100.100:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 10 17:23:32 2020 us=353748 MANAGEMENT: >STATE:1589149412,AUTH,,,,,,
Sun May 10 17:23:32 2020 us=353748 TLS: Initial packet from [AF_INET]100.100.100.100:1194, sid=257c71e1 17b40bc9
Sun May 10 17:23:32 2020 us=353748 TCP_CLIENT WRITE [26] to [AF_INET]100.100.100.100:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sun May 10 17:23:32 2020 us=383748 TCP_CLIENT READ [22] from [AF_INET]100.100.100.100:1194: P_ACK_V1 kid=0 [ 0 ]
Sun May 10 17:23:32 2020 us=383748 TCP_CLIENT WRITE [174] to [AF_INET]100.100.100.100:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=160
Sun May 10 17:23:32 2020 us=403749 Connection reset, restarting [0]
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 TCP/UDP: Closing socket
Sun May 10 17:23:32 2020 us=403749 PID packet_id_free
Sun May 10 17:23:32 2020 us=403749 SIGUSR1[soft,connection-reset] received, process restarting
Sun May 10 17:23:32 2020 us=403749 MANAGEMENT: >STATE:1589149412,RECONNECTING,connection-reset,,,,,
Sun May 10 17:23:32 2020 us=403749 Restart pause, 5 second(s)
Sun May 10 17:23:34 2020 us=410753 PID packet_id_free
Sun May 10 17:23:34 2020 us=410753 SIGTERM[hard,init_instance] received, process exiting
Sun May 10 17:23:34 2020 us=410753 MANAGEMENT: >STATE:1589149414,EXITING,init_instance,,,,,
Sun May 10 17:23:34 2020 us=410753 PKCS#11: Terminating openssl
Sun May 10 17:23:34 2020 us=410753 PKCS#11: Removing providers
Sun May 10 17:23:34 2020 us=410753 PKCS#11: Releasing sessions
Sun May 10 17:23:34 2020 us=410753 PKCS#11: Terminating slotevent
Sun May 10 17:23:34 2020 us=410753 PKCS#11: Marking as uninitialized
My Config
##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server. #
# #
# This configuration can be used by multiple #
# clients, however each client should have #
# its own cert and key files. #
# #
# On Windows, you might want to rename this #
# file so it has a .ovpn extension #
##############################################
# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client
# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node TAP-Windows Adapter V9
# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
proto tcp-client
;proto udp
# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote 100.100.100.100 1194
;remote my-server-2 1194
# Choose a random host from the remote
# list for load-balancing. Otherwise
# try hosts in the order specified.
;remote-random
# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite
# Most clients don't need to bind to
# a specific local port number.
nobind
# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nobody
# Try to preserve some state across restarts.
persist-key
persist-tun
# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
mute-replay-warnings
# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
ca "C:\\Program Files\\OpenVPN\\config\\WHM_WiFi\\CA.crt"
cert "C:\\Program Files\\OpenVPN\\config\\WHM_WiFi\\Dell-Laptop.crt"
key "C:\\Program Files\\OpenVPN\\config\\WHM_WiFi\\Dell-Laptop.key"
# Verify server certificate by checking that the
# certicate has the correct key usage set.
# This is an important precaution to protect against
# a potential attack discussed here:
#
http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the keyUsage set to
# digitalSignature, keyEncipherment
# and the extendedKeyUsage to
# serverAuth
# EasyRSA can do this for you.
remote-cert-tls server
# If a tls-auth key is used on the server
# then every client must also have the key.
;tls-auth ta.key 1
# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
# Note that v2.4 client/server will automatically
# negotiate AES-256-GCM in TLS mode.
# See also the ncp-cipher option in the manpage
cipher AES-256-CBC
auth SHA1
# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
#comp-lzo
# Set log file verbosity.
verb 7
# Silence repeating messages
mute 10
# Use saved paassword file, and dont cache
tls-client
auth-user-pass secret_WHM_WiFi
auth-nocache
