Dear,
my configurations is:
# Dispositivo usado pela VPN
dev tun
# Porta usada para conexão
port 1981
# Protocolo de conexão
proto udp
# Certificado da CA
ca keys/ca.crt
# Certificado do Servidor de VPN (Matriz)
cert keys/Akylez.crt
# Chave usada pela matriz
key keys/Akylez.key
# Chave Diffie-Hellman
dh keys/dh2048.pem
# Rede usada pela VPN (Matriz 20.20.20.1 e os clientes a partir de 20.20.20.2)
server 15.15.15.0 255.255.255.0
# Rota usada pelos clientes para acessar a rede da matriz
push "route 10.0.0.0 255.255.255.0"
# Envia um ping a cada 10 segundos e cancela a conexão se não houver resposta em 120 segun
dos
keepalive 10 120
# Máximo de clientes conectados simultaneamente
max-clients 25
# Compressão usando lzma
comp-lzo
# Usuário e grupo que o openvpn usará para ser executado
user nobody
group nogroup
# Manter a chave e os túneis persistentes
persist-key
persist-tun
# Nível de Log.
verb 3
# Informações de status da conexão
status /var/log/openvpn/akylez-status.log
# Arquivo de log
log-append /var/log/openvpn/akylez.log
my log is:
Fri May 25 02:57:45 2012 Notebooklg/189.34.66.120:1981 TLS: soft reset sec=0 bytes=50280/0 pkts=781/0
Fri May 25 02:57:49 2012 Notebooklg/189.34.66.120:1981 VERIFY OK: depth=1, /C=BR/ST=PR/L=Curitiba/O=Akylez/CN=Akylez_CA/name=Akylez_CA/emailAddress=lgabts@gmail.com
Fri May 25 02:57:49 2012 Notebooklg/189.34.66.120:1981 VERIFY OK: depth=0, /C=BR/ST=PR/L=Curitiba/O=Akylez/CN=Notebooklg/name=Notebooklg/emailAddress=lgabts@gmail.com
Fri May 25 02:57:51 2012 Notebooklg/189.34.66.120:1981 WARNING: 'ifconfig' is present in remote config but missing in local config, remote='ifconfig 15.15.15.1 15.15.15.2'
Fri May 25 02:57:51 2012 Notebooklg/189.34.66.120:1981 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 25 02:57:51 2012 Notebooklg/189.34.66.120:1981 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 25 02:57:51 2012 Notebooklg/189.34.66.120:1981 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 25 02:57:51 2012 Notebooklg/189.34.66.120:1981 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 25 02:57:51 2012 Notebooklg/189.34.66.120:1981 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri May 25 03:01:37 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:01:42 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:01:43 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:01:45 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:01:49 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:01:57 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:02:13 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:02:45 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:06:39 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:08:49 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:08:50 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:08:52 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:08:56 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:09:04 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:09:20 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:09:52 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:11:42 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:15:56 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:15:57 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:15:59 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:16:03 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:16:11 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:16:27 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:16:45 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:16:59 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:21:48 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:21:55 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:23:03 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:23:04 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:23:06 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:23:10 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:23:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:23:34 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:24:06 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:27:25 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:27:29 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:27:55 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:28:25 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:28:48 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:29:36 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:30:10 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:30:11 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:30:13 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:30:17 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:30:25 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:30:41 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:31:12 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:31:13 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:33:56 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:24 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:28 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:28 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:28 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:29 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:29 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:36:44 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:12 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:18 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:20 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:22 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:24 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:32 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:37:48 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:38:20 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:39:03 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:10 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:24 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:25 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:27 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:31 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:39 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:44:55 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
Fri May 25 03:45:27 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
vpn log
-
janjust
- Forum Team
- Posts: 2703
- Joined: Fri Aug 20, 2010 2:57 pm
- Location: Amsterdam
- Contact:
Re: vpn log
this is a harmless but annoying message
currently the only workaround is to unbind tcp/ip v6 from the tap adapter on the clients (presuming it's a windows client).
This should be fixed in the community edition of openvpn 2.3 ; I don't know when it will be fixed in the Access Server version.
and is caused by a client sending IPv6 traffic over the tunnel, which OpenVPN does not (yet) like.Fri May 25 03:01:37 2012 Notebooklg/189.34.66.120:1981 Need IPv6 code in mroute_extract_addr_from_packet
currently the only workaround is to unbind tcp/ip v6 from the tap adapter on the clients (presuming it's a windows client).
This should be fixed in the community edition of openvpn 2.3 ; I don't know when it will be fixed in the Access Server version.