Client Connected But No Access To Server

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
Elcid91
OpenVpn Newbie
Posts: 1
Joined: Wed Jul 11, 2018 1:52 pm

Client Connected But No Access To Server

Post by Elcid91 » Wed Jul 11, 2018 1:55 pm

I have an openVPN server that I am attempting to connect to. When I sudo openvpn --config shawn-home.ovpnIt appears to me that the connection is successful:

Code: Select all

Wed Jul 11 09:33:04 2018 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 10 2018
Wed Jul 11 09:33:04 2018 library versions: OpenSSL 1.1.0g  2 Nov 2017, LZO 2.08
Wed Jul 11 09:33:04 2018 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul 11 09:33:04 2018 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Jul 11 09:33:04 2018 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Jul 11 09:33:04 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]97.76.87.146:1194
Wed Jul 11 09:33:04 2018 Socket Buffers: R=[212992->212992] S=[212992->212992]
Wed Jul 11 09:33:04 2018 UDP link local: (not bound)
Wed Jul 11 09:33:04 2018 UDP link remote: [AF_INET]97.76.87.146:1194
Wed Jul 11 09:33:04 2018 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Wed Jul 11 09:33:04 2018 TLS: Initial packet from [AF_INET]97.76.87.146:1194, sid=20f694c6 aee1bc45
Wed Jul 11 09:33:04 2018 VERIFY OK: depth=1, CN=Easy-RSA CA
Wed Jul 11 09:33:04 2018 VERIFY KU OK
Wed Jul 11 09:33:04 2018 Validating certificate extended key usage
Wed Jul 11 09:33:04 2018 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Jul 11 09:33:04 2018 VERIFY EKU OK
Wed Jul 11 09:33:04 2018 VERIFY OK: depth=0, CN=server
Wed Jul 11 09:33:04 2018 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Wed Jul 11 09:33:04 2018 [server] Peer Connection Initiated with [AF_INET]97.76.87.146:1194
Wed Jul 11 09:33:06 2018 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Jul 11 09:33:06 2018 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13,peer-id 1,cipher AES-256-GCM'
Wed Jul 11 09:33:06 2018 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 11 09:33:06 2018 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 11 09:33:06 2018 OPTIONS IMPORT: route options modified
Wed Jul 11 09:33:06 2018 OPTIONS IMPORT: peer-id set
Wed Jul 11 09:33:06 2018 OPTIONS IMPORT: adjusting link_mtu to 1624
Wed Jul 11 09:33:06 2018 OPTIONS IMPORT: data channel crypto options modified
Wed Jul 11 09:33:06 2018 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Jul 11 09:33:06 2018 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Jul 11 09:33:06 2018 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Jul 11 09:33:06 2018 ROUTE_GATEWAY 10.0.10.1/255.255.255.0 IFACE=enp2s0 HWADDR=48:4d:7e:d2:08:0a
Wed Jul 11 09:33:06 2018 TUN/TAP device tun0 opened
Wed Jul 11 09:33:06 2018 TUN/TAP TX queue length set to 100
Wed Jul 11 09:33:06 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Jul 11 09:33:06 2018 /sbin/ip link set dev tun0 up mtu 1500
Wed Jul 11 09:33:06 2018 /sbin/ip addr add dev tun0 local 10.8.0.14 peer 10.8.0.13
Wed Jul 11 09:33:06 2018 /etc/openvpn/update-resolv-conf tun0 1500 1552 10.8.0.14 10.8.0.13 init
Wed Jul 11 09:33:06 2018 /sbin/ip route add 10.8.0.1/32 via 10.8.0.13
Wed Jul 11 09:33:06 2018 GID set to nogroup
Wed Jul 11 09:33:06 2018 UID set to nobody
Wed Jul 11 09:33:06 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jul 11 09:33:06 2018 Initialization Sequence Complete
I can ping 10.8.0.1 but I cannot do a showmount on the server:

Code: Select all

clnt_create: RPC: Port mapper failure - Timed out
Therefore I cannot connect to my NFS mounts. Is there something that I am missing?

Post Reply