Hello,
I have a problem with setting up OpenVPN on Debian. I've tried "autoconfigs" but it didn't work so i started to read articles.
Based on few tutorials i've created something that i think doesn't work either.
What i'm trying to do is set up openvpn server on host 192.168.1.250(Debian with OpenVpn server) and create config with all required certs and key to access remotely my lan resources via split tunneling. My subnet is 192.168.1.x. I've already opened port 1194 in the firewall.
This is what i've made so far:
mode server
local | my public ip |
proto udp4
server 192.168.3.0 255.255.255.0
dev tun
persist-key
persist-tun
user nobody
group nogroup
ca /etc/ssl/private/VPNtest/ca.crt
cert /etc/ssl/private/VPNtest/VPNtest.crt
key /etc/ssl/private/VPNtest/VPNtest.key
dh /etc/ssl/private/VPNtest/dh.pem
tls-crypt /etc/ssl/private/VPNtest/ta.key 0
tls-version-min 1.2
cipher AES-256-GCM
auth SHA512
tls-cipher ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA3$
keepalive 10 120
reneg-sec 86400
#push "redirect-gateway def1 bypass-dhcp"
push "route 192.168.1.250 255.255.255.255"
when i run " openvpn --config /etc/openvpn/server/VPNtest.conf "
I get this...
Thu Oct 29 07:26:14 2020 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Thu Oct 29 07:26:14 2020 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10
Thu Oct 29 07:26:14 2020 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Oct 29 07:26:14 2020 Deprecated TLS cipher name 'ECDHE-ECDSA-AES128-GCM-SHA256', please use IANA name 'TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256'
Thu Oct 29 07:26:14 2020 Deprecated TLS cipher name 'ECDHE-RSA-AES128-GCM-SHA256', please use IANA name 'TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256'
Thu Oct 29 07:26:14 2020 Deprecated TLS cipher name 'ECDHE-ECDSA-AES256-GCM-SHA384', please use IANA name 'TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384'
Thu Oct 29 07:26:14 2020 Deprecated TLS cipher name 'ECDHE-RSA-AES256-GCM-SHA384', please use IANA name 'TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384'
Thu Oct 29 07:26:14 2020 Deprecated TLS cipher name 'ECDHE-ECDSA-CHACHA20-POLY1305', please use IANA name 'TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256'
Thu Oct 29 07:26:14 2020 Deprecated TLS cipher name 'ECDHE-RSA-CHACHA20-POLY1305', please use IANA name 'TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256'
Thu Oct 29 07:26:14 2020 TUN/TAP device tun0 opened
Thu Oct 29 07:26:14 2020 /sbin/ip link set dev tun0 up mtu 1500
Thu Oct 29 07:26:14 2020 /sbin/ip addr add dev tun0 local 192.168.3.1 peer 192.168.3.2
Thu Oct 29 07:26:14 2020 TCP/UDP: Socket bind failed on local address [AF_INET]83.8.12.163:1194: Cannot assign requested address (errno=99)
Thu Oct 29 07:26:14 2020 Exiting due to fatal error
Thu Oct 29 07:26:14 2020 /sbin/ip addr del dev tun0 local 192.168.3.1 peer 192.168.3.2
So i will appreciate if someone would help me with this.
Thanks in advance,
MarcoBrOVo
