Client configuration incident ?

zicklon

Hi everybody,

I've got an error essage when launching the openvpn client to be connected in routed mode :

ERROR: --dev tun also require --ifconfig
Exiting

Does anyone got this message too ?
If yes maybe somebody 's got the solution.
I've followed this tutorial http://www.nbs-system.com/blog/howto-openvpn2/#installation

Thanks by advance

gladiatr72

I would suggest following the documentation found here:

http://openvpn.net/index.php/open-source/documentation.html

zicklon

gladiatr72 wroteI would suggest following the documentation found here:

http://openvpn.net/index.php/open-source/documentation.html

Thanks for your answer

I've used the french how to link, and now i think i know what's that's not working:
it's surely because i haven't put a CCD dir for the client and without the config file in it the ip of the client and the ip of the gateway isn't pushed to the client.

[deleted]

zicklon wrote
gladiatr72 wroteI would suggest following the documentation found here:

http://openvpn.net/index.php/open-source/documentation.html
Thanks for your answer

I've used the french how to link, and now i think i know what's that's not working:
it's surely because i haven't put a CCD dir for the client and without the config file in it the ip of the client and the ip of the gateway isn't pushed to the client.

Could be.

Give us your configs and logs.

zicklon

Give us your configs and logs.

Hi,

I've put all the files you need bellow.

Here's the log when i try to log on with openvpn gui (client)

Fri Apr 08 18:38:02 2011 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov  8 2010
Fri Apr 08 18:38:02 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Apr 08 18:38:10 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Apr 08 18:38:10 2011 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri Apr 08 18:38:10 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 08 18:38:10 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 08 18:38:10 2011 LZO compression initialized
Fri Apr 08 18:38:10 2011 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Fri Apr 08 18:38:10 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Apr 08 18:38:10 2011 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 08 18:38:10 2011 Local Options hash (VER=V4): 'ee93268d'
Fri Apr 08 18:38:10 2011 Expected Remote Options hash (VER=V4): 'bd577cd1'
Fri Apr 08 18:38:10 2011 Attempting to establish TCP connection with 202.142.24.241:443
Fri Apr 08 18:38:11 2011 TCP connection established with 202.142.24.241:443
Fri Apr 08 18:38:11 2011 TCPv4_CLIENT link local: [undef]
Fri Apr 08 18:38:11 2011 TCPv4_CLIENT link remote: 202.142.24.241:443
Fri Apr 08 18:38:12 2011 TLS: Initial packet from 202.142.24.241:443, sid=c4b4cd43 906d3861
Fri Apr 08 18:38:19 2011 VERIFY OK: depth=1, /C=FR/ST=FR/L=PARIS/O=UNDERGROUND/OU=UNDERGROUND/CN=server/emailAddress=wall_ace@hotmail.fr
Fri Apr 08 18:38:19 2011 VERIFY OK: nsCertType=SERVER
Fri Apr 08 18:38:19 2011 VERIFY OK: depth=0, /C=FR/ST=FR/L=PARIS/O=UNDERGROUND/OU=UNDERGROUND/CN=server/emailAddress=wall_ace@hotmail.fr
Fri Apr 08 18:38:33 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 08 18:38:33 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 08 18:38:33 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 08 18:38:33 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 08 18:38:33 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 08 18:38:33 2011 [server] Peer Connection Initiated with 202.142.24.241:443
Fri Apr 08 18:38:36 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Apr 08 18:38:37 2011 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,ping 10,ping-restart 120'
Fri Apr 08 18:38:37 2011 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 08 18:38:37 2011 OPTIONS IMPORT: route options modified
Fri Apr 08 18:38:37 2011 ROUTE default_gateway=192.168.0.254
Fri Apr 08 18:38:37 2011 TAP-WIN32 device [Connexion au réseau local 3] opened: \\.\Global\{556099FC-3BE7-4F3E-989E-E64811456B96}.tap
Fri Apr 08 18:38:37 2011 TAP-Win32 Driver Version 9.7 
Fri Apr 08 18:38:37 2011 TAP-Win32 MTU=1500
Fri Apr 08 18:38:37 2011 ERROR: --dev tun also requires --ifconfig
Fri Apr 08 18:38:37 2011 Exiting

The configuration file of openvpn-server in routed-mode.

local 202.142.24.241
port 443
proto tcp-server
dev tun0
tun-mtu 1500
mode server
tls-server
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
dh /etc/openvpn/dh1024.pem
key /etc/openvpn/server.key
tls-auth /etc/openvpn/ta.key 0
ifconfig 192.168.0.1 192.168.0.2
route 192.168.0.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0"
client-to-client
keepalive 10 120
comp-lzo
max-clients 15
persist-key
persist-tun
user nobody
group nogroup
status /etc/openvpn/openvpn-status.log
log-append /etc/openvpn/openvpn.log
verb 4
mute 10
script-security 2

An ifconfig on the network interfaces (server)

th0      Link encap:Ethernet  HWaddr 00:16:3e:10:18:f1  
          inet addr:202.142.24.241  Bcast:202.142.24.255  Mask:255.255.255.128
          inet6 addr: fe80::216:3eff:fe10:18f1/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:9502950 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2092265 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:847089314 (847.0 MB)  TX bytes:603274376 (603.2 MB)
          Interrupt:9 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:274062 errors:0 dropped:0 overruns:0 frame:0
          TX packets:274062 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:32867277 (32.8 MB)  TX bytes:32867277 (32.8 MB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:192.168.0.1  P-t-P:192.168.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

The configuration file (client.openvpn)

client
dev tun0
remote 202.142.24.241 443
route-gateway 192.168.0.254
redirect-gateway
proto tcp
nobind
# Permet de préserver les éléments de connection
persist-key
persist-tun
#Certificats du client
ca ca.crt
cert client1.crt
key client1.key
tls-auth ta.key 1
ns-cert-type server
cipher BF-CBC
pull
# afin d'économiser la bande passante
comp-lzo
# Défini le niveau de verbosité
verb 3
# Empêche la répétition des messages
mute 20
script-security 2

Thanks for your help

zicklon

I've found the solution
i've removed "local" into the server configuration file and after a
service openvpn restart
everything is working fine.

zicklon

But there 's a problem with the client configuration

I always have this error message when i try to connect :
OpenVPNClient start "profile"'
process started and then immediately exited:[]

here's my profile.ovpn

; client
; remote 6.35.241.112
; port 443
; dev tun0
; proto tcp
; resolv-retry infinite
; nobind
; tls-client
; persist-key
; persist-tun
; ca ca.crt
; cert julien10.crt
; key julien10.key
; ns-cert-type server
; tls-auth ta.key 1
; cipher BF-CBC
; comp-lzo
verb 2
mute 5

If anybody has an idea go ahead ^^