SOLVED: Error accessing NAS via OpenVPN

under72

Hi,

I am trying to access my NAS via OpenVPN. I was able to connect and ping but I cannot map the network drive. I am getting the following error message in the OpenVPN log:

Mon Oct 31 10:05:29 2011 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Mon Oct 31 10:05:29 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Mon Oct 31 10:05:29 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Oct 31 10:05:29 2011 LZO compression initialized
Mon Oct 31 10:05:40 2011 UDPv4 link local: [undef]
Mon Oct 31 10:05:40 2011 UDPv4 link remote: xx.xxx.xxx.xxx:1194
Mon Oct 31 10:05:41 2011 [server] Peer Connection Initiated with xx.xxx.xxx.xxx:1194
Mon Oct 31 10:05:42 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Mon Oct 31 10:05:42 2011 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{912847F2-6771-4BAB-BF61-79E0ED01AFFC}.tap
Mon Oct 31 10:05:42 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {912847F2-6771-4BAB-BF61-79E0ED01AFFC} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Oct 31 10:05:42 2011 Successful ARP Flush on interface [25] {912847F2-6771-4BAB-BF61-79E0ED01AFFC}
Mon Oct 31 10:05:42 2011 Warning: address 192.168.0.1 is not a network address in relation to netmask 255.255.255.0
Mon Oct 31 10:05:42 2011 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=25]
Mon Oct 31 10:05:42 2011 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=25]
Mon Oct 31 10:05:42 2011 Initialization Sequence Completed

Here is my server config:

# OpenVPN server configuration QNAP NAS
# basic settings
port 1194
proto udp
dev tun
#
# detect mtu if the connection is slow.
; mtu-test
#
# define mtu, if necessary
; tun-mtu xyz
#
# define the ip-addresses of the underlying tunnel 
server 10.8.0.0 255.255.255.0
#
# Route 
push "route 192.168.0.1 255.255.255.0"   #  <--- Enter the ip-address of your home network here!
#
# certificates & keys
dh /opt/etc/openvpn/keys/dh1024.pem
ca /opt/etc/openvpn/keys/ca.crt
cert /opt/etc/openvpn/keys/server.crt
key /opt/etc/openvpn/keys/server.key
#
# data compression
comp-lzo
#
# allow, that several clients with the same common name log on
; duplicate-cn
#
# different clients can "see" each other through the tunnel.
; client-to-client
#
# Keepalive
keepalive 15 120
#
# verbosity of status messages in the console. Activate for debugging (1-9 possible)
; verb 5
#
# Log files
; status /share/HDA_DATA/optware/opt/etc/openvpn/log/status.log
; log-append /share/HDA_DATA/optware/opt/etc/openvpn/log/openvpn.log
# 
# Run as daemon (activate, after everything is set up properly)
; daemon
#
# Management Interface. Access with "telnet localhost 7505"
management localhost 7505

Here is the client config:

# connect to QNAP OpenVPN Server
#
proto udp
dev tun
tls-client
remote xxx.xxxxxxxx.com 1194  #  <--- enter your dyndns-account here!
pull
# set mtu, if necessary
; tun-mtu xyz
#
resolv-retry infinite
nobind
persist-key
persist-tun
# certificates and keys
# Note the double \\ in the path for a windows config
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client1.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client1.key"
#
comp-lzo

Thanks

janjust

push "route 192.168.0.1 255.255.255.0" # <--- Enter the ip-address of your home network here!

you have entered an IP address here , not a network address; if your home network is 192.168.0.0/24 then change the line to 192.168.0.0. If you want to access ONLY your NAS then use

push "route 192.168.0.1 255.255.255.255"

maikcat

also try to use newer version of openvpn 2.0.9 is a little old...

win 7 and 2.0.9 dont work.

Michael

under72

janjust wrote you have entered an IP address here , not a network address; if your home network is 192.168.0.0/24 then change the line to 192.168.0.0. If you want to access ONLY your NAS then use

According to my router D-Link, my LAN address is:
IP Address : 192.168.0.1
Subnet Mask : 255.255.255.0
My NAS is currently on 192.168.0.196

push "route 192.168.0.1 255.255.255.255"

I tried your suggestion but I couldn't connect anymore as I got a new error message. By the way, I am forwarding port 1194

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Nov 01 20:41:50 2011 TLS Error: TLS handshake failed
Tue Nov 01 20:41:50 2011 SIGUSR1[soft,tls-error] received, process restarting

janjust

IP Address : 192.168.0.1
Subnet Mask : 255.255.255.0

that is the address of your router... aha, then use

push "route 192.168.0.0 255.255.255.0"

instead (note the zeroes!)

maikcat

TLS error has nothing to do with the push route statement...

check your firewalls (both router and openvpn server).

Michael.

under72

Thank you guys...updating OpenVPN client and changing to: push "route 192.168.0.0 255.255.255.0" solved the problem