Hello, I have a problem on new configurations : 6 2011 OpenVPN 2.1_rc20 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Oct 1 2009 Thu Feb 17 14:56:06 2011 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page). Thu Feb 17 14:56:06 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Thu Feb 17 14:56:06 2011 LZO compression initialized Thu Feb 17 14:56:06 2011 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ] Thu Feb 17 14:56:06 2011 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ] Thu Feb 17 14:56:06 2011 Local Options hash (VER=V4): 'd79ca330' Thu Feb 17 14:56:06 2011 Expected Remote Options hash (VER=V4): 'f7df56b8' Thu Feb 17 14:56:06 2011 Socket Buffers: R=[8192->8192] S=[8192->8192] Thu Feb 17 14:56:06 2011 UDPv4 link local: [undef] Thu Feb 17 14:56:06 2011 UDPv4 link remote: 178.xxx.xxx.xxx:1194 Thu Feb 17 14:56:06 2011 TLS: Initial packet from 178.xxx.xxx.xxx:1194, sid=ee4555c8 69c7fa5b Thu Feb 17 14:56:06 2011 VERIFY OK: depth=1, /O=Orion/CN=Certification_Authority_Certificate Thu Feb 17 14:56:06 2011 VERIFY X509NAME OK: /O=Orion/CN=vpn-Orion Thu Feb 17 14:56:06 2011 VERIFY OK: depth=0, /O=Orion/CN=vpn-Orion Thu Feb 17 14:56:07 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Feb 17 14:56:07 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Feb 17 14:56:07 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Feb 17 14:56:07 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Feb 17 14:56:07 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Thu Feb 17 14:56:07 2011 [vpn-Orion59] Peer Connection Initiated with 178.33.22.89:1194 Thu Feb 17 14:56:09 2011 SENT CONTROL [vpn-Orion59]: 'PUSH_REQUEST' (status=1) Thu Feb 17 14:56:10 2011 PUSH: Received control message: 'PUSH_REPLY,route 178.xxx.xxx.xxx 255.255.255.255,route-gateway 192.168.159.1,ping 10,ping-restart 120,ifconfig 192.168.159.7 255.255.255.0' Thu Feb 17 14:56:10 2011 OPTIONS IMPORT: timers and/or timeouts modified Thu Feb 17 14:56:10 2011 OPTIONS IMPORT: --ifconfig/up options modified Thu Feb 17 14:56:10 2011 OPTIONS IMPORT: route options modified Thu Feb 17 14:56:10 2011 OPTIONS IMPORT: route-related options modified Thu Feb 17 14:56:10 2011 ROUTE default_gateway=192.168.77.1 Thu Feb 17 14:56:10 2011 TAP-WIN32 device [Connexion au réseau local 2] opened: \\.\Global\{C2D744C0-4707-439F-2CB7-08C16648F81A}.tap Thu Feb 17 14:56:10 2011 TAP-Win32 Driver Version 9.6 Thu Feb 17 14:56:10 2011 TAP-Win32 MTU=1500 Thu Feb 17 14:56:10 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.159.7/255.255.255.0 on interface {C2D744C0-4707-439F-2CB7-08C16648F81A} [DHCP-serv: 192.168.159.0, lease-time: 31536000] Thu Feb 17 14:56:10 2011 Successful ARP Flush on interface [14] {C2D744C0-4707-439F-2CB7-08C16648F81A} Thu Feb 17 14:56:15 2011 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up Thu Feb 17 14:56:15 2011 C:\WINDOWS\system32\route.exe ADD 178.33.22.89 MASK 255.255.255.255 192.168.159.1 Thu Feb 17 14:56:15 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu Feb 17 14:56:15 2011 Route addition via IPAPI succeeded [adaptive] Thu Feb 17 14:56:15 2011 Initialization Sequence Completed The connexion is starting and the ping is OK for 3 seconds on 192.168.159.1 during the end of the connexion. At this moment : Successful ARP Flush on interface , the ping is ok And wen the little widows is comming to say : User is now connected - Assigned IP : 192.168.159.7 The ping is stoped. But Connexion is still active I thing it is a route problem Do someone have the solution ? Thank you

you did not post your setup, but when I read the log file I see an error in your configuration: a route is added to reach the remote machine via 192.168.159.1, yet this IP is part of the VPN subnet - that will never work. Check your config, remove all 'route' and 'push "route"' statements that you don't need at first and then start troubleshooting. If that works, enable the route and push route statements again until it breaks: then you will know exactly what goes wrong and what to do about it. HTH, JJK

Sorry for my bad english.. My configuration : Serveur Zentyal : 178.xxx.xxx.xxx VPN address : 192.168.159.1 v^ vpn address : 192.168.159.2 client address : 192.168. 77.5 Successful ARP Flush on interface [14] {C2D741C.... At this moment, the ping is OK The route (and the ping) is falling just after this ligne But the vpn is still ON (green) My server is a Zentyal (débian) behind Esxi with public adress ip in bridge I forced the rc.local to obtain the good ip

please post your openvpn server configuration file . The thing that is broken is this: first your client connects to the remote machine [code]vpn-Orion59] Peer Connection Initiated with 178.33.22.89:1194[/code] then later on a route is added [code]C:\WINDOWS\system32\route.exe ADD 178.33.22.89 MASK 255.255.255.255 192.168.159.1[/code] this creates a routing loop. Your server configuration file most likely contains a line [code]push "route 178.33.22.89 255.255.255.255"[/code] Remove this line and try again. HTH, JJK

Hello, Wich line must I remove and where can I remove it ? in the file.ovpn ? Thank you.

post your server configuration and I can tell you. This is a *server* side problem, not the client side. If you have no control over the server then you're out of luck.

Well, I'm half luky because I can use myself the server but I'm beginer in linux. I use a Ubuntu Zentyal on a ''dedied server ovh'' in bridge. I'm starting to learn Linux ;-) *************************************************** I know two files to change : 1) - /etc/network/interfaces /etc/network/interfaces auto lo eth0 iface lo inet loopback iface eth0 inet static address IP.FAIL.OVER netmask 255.255.255.255 broadcast IP.FAIL.OVER post-up route add IP.OF.MYPHYSICAL.254 dev eth0 post-up route add default gw IP.OF.MYPHYSICAL.254 post-down route del IP.OF.MYPHYSICAL.254 dev eth0 post-down route del default gw IP.OF.MYPHYSICAL.254 /etc/resolv.conf nameserver 213.186.33.99 *************************************************** 2) /etc/rc.local ifconfig eth0 IP.FAIL.OVER netmask 255.255.255.255 broadcast IP.FAIL.OVER route add IP.OF.MYPHYSICAL.254 dev eth0 route add default gw IP.OF.MYPHYSICAL.254 *************************************************** I use the rc.local because Zentyal erased the good line at restart. But maybe it is not in this files that I must change something.

it's not - there should be a server config file present in [code] /etc/openvpn[/code] if you did not set this up then who did?

hi there, if you are using openvpn from zentyal's management interface, i suggest you try posting first at their forum. usually such appliances (untangle,zentyal,zeroshell) tend to overwrite config files and loose any changes you manualy make.. cheers, michael.

Well, I found the file and I add a # before the last line wha said : push "route 178.33.22.89 255.255.255.255" Record, close restart and I try now.

:cry: Same result. I can ping my server only for 3 or 4 seconds, during the end of connexion etablish. At the real end of create of connexion, ping is lost. It is strange to can ping for so short time. It proove that my pc can see my server. but why so short time ?

Ping only at the opening of VPN

Bzh7000

Any solution to automatic :

route add abc.def.ghi.klm MASK 255.255.255.252 192.168.159.1
enter
route delete abc.def.ghi.klm MASK 255.255.255.252 192.168.159.1
enter

and then obtain the share on server ?

Thanks

janjust

if you need to run such route commands on the client, use an 'up' script/batch file:

script-security 2
up up.bat

where "up.bat" contains the route/net use commands you want

Instead of using "up up.bat" you can also use

route-up up.bat

Bzh7000

I have only 8 IP but the diffused lan
Must be : 178.uvw.xyz.0/24
and NOT : 178.uvw.xyz.88/30

Now, everything is OK now 😛

« Previous Page