proliant Hi, i have got the following error message within the log: openvpn[24661]: TCP NOTE: Rejected connection attempt from [AF_INET]XX.XX.XX.XX:26974 due to --remote setting :oops: to explain: i have got an dynamic adress and the vpn client/partner has got an dynamic adress. the problem shows when the client/partner changes its ip adress and resists until i restart openvpn daemon/service. please help... :?: thanks proliant
proliant Hi, Server config: dev ovpns1 dev-type tun dev-node /dev/tun1 writepid /var/run/openvpn_server1.pid #user nobody #group nobody script-security 3 daemon keepalive 10 60 ping-timer-rem persist-tun persist-key proto tcp-server cipher AES-128-CBC up /usr/local/sbin/ovpn-linkup down /usr/local/sbin/ovpn-linkdown ifconfig 10.0.8.1 10.0.8.2 lport 1194 management /var/etc/openvpn/server1.sock unix max-clients 2 push "route 192.168.1.0 255.255.255.0" route 192.168.2.0 255.255.255.0 secret /var/etc/openvpn/server1.secret float Client: dev tun ifconfig 10.0.8.2 10.0.8.1 dev-node openvpn proto tcp-client remote xyz1234.dyndns.net 84 (<-- its natted 84-->1194) secret /var/etc/key.pem persist-key persist-tun verb 4 cipher AES-128-CBC Please keep in mind: both ips are changing from time to time! Thanks for your help! cheers proliant
proliant Hi, Server Config: dev ovpns1 dev-type tun dev-node /dev/tun1 writepid /var/run/openvpn_server1.pid #user nobody #group nobody script-security 3 daemon keepalive 10 60 ping-timer-rem persist-tun persist-key proto tcp-server cipher AES-128-CBC up /usr/local/sbin/ovpn-linkup down /usr/local/sbin/ovpn-linkdown ifconfig 10.0.8.1 10.0.8.2 lport 1194 management /var/etc/openvpn/server1.sock unix max-clients 2 push "route 192.168.1.0 255.255.255.0" route 192.168.2.0 255.255.255.0 secret /var/etc/openvpn/server1.secret float Client config: #Client dev tun0 proto tcp-client ifconfig 10.0.8.2 10.0.8.1 remote xyz1234.dyndns.com 84 secret /etc/key_file.pem persist-key persist-tun verb 4 cipher AES-128-CBC Hope that helps.. cheers proliant
maikcat for starters the secret is different... can you for testing follow this tutorial: http://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html THEN add more options on it.. Michael.
