Page 1 of 1

client inside lan can not ping a server vpn

Posted: Tue Nov 01, 2011 5:03 pm
by macbox
Hello everyone!

I create a vpn network:

Mac is outside the network (10.8.0.6)
Server vpn ip address 10.8.0.1 ip address lan:192.168.1.5

Mac regularly connects to the server vpn
Mac ping a server vpn and viceversa: OK!

Computer C(win7) ip address vpn: 10.8.0.10 ip address lan:192.168.1.7
Computer C(win7) regularly connects to the server vpn but can not ping a server vpn and viceversa
Computer C(win7) can not ping a Mac a and viceversa


Computer C inside the LAN servers where there is a serverv vpn

of course when I connect the computer C to the server vpn I change configuration: remote testing.dydns.org with remote 192.168.1.5

Why? The configuration is correct

CLIENT
client
dev tun
proto udp
remote testing.dydns.org
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert massimo.crt
key massimo.key
ns-cert-type server
comp-lzo
verb 3
-----------
SERVER
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/tonidovpn.crt
key /etc/openvpn/keys/tonidovpn.key
dh /etc/openvpn/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push “route 192.168.1.5 255.255.255.0″
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

Thanks!!

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 6:56 am
by Mimiko
Computer C(win7) regularly connects to the server vpn but can not ping a server vpn and viceversa
Do you ping 10.8.0.1, or 192.168.1.5?
Computer C(win7) can not ping a Mac a and viceversa
Please read the manual for "client-to-client".

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 7:37 am
by macbox
computer C can not ping 10.8.0.1!!

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 8:44 am
by Mimiko
Post a client C openvpn log and routing table. Disable any firewall on tun adapter.

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 11:36 am
by macbox
pc C (win7) disabled firewall : OK!

i added a static route on pc C:

route add 10.8.0.0(range ip vpn) mask 255.255.254.0 10.8.0.1(server vpn)

Now,pc C ping server vpn

but can not ping 10.8.0.6 (pc outside network)

log openvpn client:

Wed Nov 02 12:19:14 2011 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Wed Nov 02 12:19:14 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:19:14 2011 LZO compression initialized
Wed Nov 02 12:19:14 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:19:14 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:19:14 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:19:14 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:19:14 2011 UDPv4 link local: [undef]
Wed Nov 02 12:19:14 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:19:14 2011 TLS: Initial packet from 192.168.1.5:1194, sid=955e0be2 8904caa1
Wed Nov 02 12:19:14 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:19:14 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:19:14 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:19:15 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:19:15 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:19:15 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:19:15 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:19:15 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:19:15 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:19:16 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:19:16 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:19:16 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:19:16 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:19:16 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:19:16 2011 TAP-WIN32 device [Connessione alla rete locale (LAN)] opened: \\.\Global\{EB914BFC-B829-4762-ACD6-105D958902E3}.tap
Wed Nov 02 12:19:16 2011 TAP-Win32 Driver Version 8.4
Wed Nov 02 12:19:16 2011 TAP-Win32 MTU=1500
Wed Nov 02 12:19:16 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.10/255.255.255.252 on interface {EB914BFC-B829-4762-ACD6-105D958902E3} [DHCP-serv: 10.8.0.9, lease-time: 31536000]
Wed Nov 02 12:19:16 2011 Successful ARP Flush on interface [18] {EB914BFC-B829-4762-ACD6-105D958902E3}
Wed Nov 02 12:19:16 2011 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Wed Nov 02 12:19:16 2011 Route: Waiting for TUN/TAP interface to come up...
Wed Nov 02 12:19:18 2011 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed Nov 02 12:19:18 2011 route ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.9
Wed Nov 02 12:19:18 2011 ROUTE: route addition failed using CreateIpForwardEntry: Uno o pi˘ argomenti non validi. [if_index=18]
Wed Nov 02 12:19:18 2011 Route addition via IPAPI failed
Wed Nov 02 12:19:18 2011 route ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Wed Nov 02 12:19:18 2011 ROUTE: route addition failed using CreateIpForwardEntry: Uno o pi˘ argomenti non validi. [if_index=18]
Wed Nov 02 12:19:18 2011 Route addition via IPAPI failed
Wed Nov 02 12:19:18 2011 Initialization Sequence Completed
Wed Nov 02 12:21:58 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:21:58 2011 TCP/UDP: Closing socket
Wed Nov 02 12:21:58 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:21:58 2011 Restart pause, 2 second(s)
Wed Nov 02 12:22:00 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:22:00 2011 Re-using SSL/TLS context
Wed Nov 02 12:22:00 2011 LZO compression initialized
Wed Nov 02 12:22:00 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:22:00 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:22:00 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:22:00 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:22:00 2011 UDPv4 link local: [undef]
Wed Nov 02 12:22:00 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:22:00 2011 TLS: Initial packet from 192.168.1.5:1194, sid=09e90909 b4182b68
Wed Nov 02 12:22:00 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:22:00 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:22:00 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:22:01 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:22:01 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:22:01 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:22:01 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:22:01 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:22:01 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:22:02 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:22:02 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:22:02 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:22:02 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:22:02 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:22:02 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:22:02 2011 Initialization Sequence Completed
Wed Nov 02 12:24:03 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:24:03 2011 TCP/UDP: Closing socket
Wed Nov 02 12:24:03 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:24:03 2011 Restart pause, 2 second(s)
Wed Nov 02 12:24:05 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:24:05 2011 Re-using SSL/TLS context
Wed Nov 02 12:24:05 2011 LZO compression initialized
Wed Nov 02 12:24:05 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:24:05 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:24:05 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:24:05 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:24:05 2011 UDPv4 link local: [undef]
Wed Nov 02 12:24:05 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:24:05 2011 TLS: Initial packet from 192.168.1.5:1194, sid=cee29fea b3143446
Wed Nov 02 12:24:05 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:24:05 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:24:05 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:24:06 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:24:06 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:24:06 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:24:06 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:24:06 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:24:06 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:24:07 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:24:07 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:24:07 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:24:07 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:24:07 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:24:07 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:24:07 2011 Initialization Sequence Completed
Wed Nov 02 12:26:07 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:26:07 2011 TCP/UDP: Closing socket
Wed Nov 02 12:26:07 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:26:07 2011 Restart pause, 2 second(s)
Wed Nov 02 12:26:09 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:26:09 2011 Re-using SSL/TLS context
Wed Nov 02 12:26:09 2011 LZO compression initialized
Wed Nov 02 12:26:09 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:26:09 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:26:09 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:26:09 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:26:09 2011 UDPv4 link local: [undef]
Wed Nov 02 12:26:09 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:26:09 2011 TLS: Initial packet from 192.168.1.5:1194, sid=a3fe9db6 649c7db5
Wed Nov 02 12:26:09 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:26:09 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:26:09 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:26:10 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:26:10 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:26:10 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:26:10 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:26:10 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:26:10 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:26:11 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:26:11 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:26:11 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:26:11 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:26:11 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:26:11 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:26:11 2011 Initialization Sequence Completed
Wed Nov 02 12:28:11 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:28:11 2011 TCP/UDP: Closing socket
Wed Nov 02 12:28:11 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:28:11 2011 Restart pause, 2 second(s)
Wed Nov 02 12:28:13 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:28:13 2011 Re-using SSL/TLS context
Wed Nov 02 12:28:13 2011 LZO compression initialized
Wed Nov 02 12:28:13 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:28:13 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:28:13 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:28:13 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:28:13 2011 UDPv4 link local: [undef]
Wed Nov 02 12:28:13 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:28:13 2011 TLS: Initial packet from 192.168.1.5:1194, sid=1926b1fc 19da5811
Wed Nov 02 12:28:13 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:28:13 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:28:13 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:28:14 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:28:14 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:28:14 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:28:14 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:28:14 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:28:14 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:28:15 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:28:15 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:28:15 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:28:15 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:28:15 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:28:15 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:28:15 2011 Initialization Sequence Completed
Wed Nov 02 12:30:15 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:30:15 2011 TCP/UDP: Closing socket
Wed Nov 02 12:30:15 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:30:15 2011 Restart pause, 2 second(s)
Wed Nov 02 12:30:17 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:30:17 2011 Re-using SSL/TLS context
Wed Nov 02 12:30:17 2011 LZO compression initialized
Wed Nov 02 12:30:17 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:30:17 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:30:17 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:30:17 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:30:17 2011 UDPv4 link local: [undef]
Wed Nov 02 12:30:17 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:30:17 2011 TLS: Initial packet from 192.168.1.5:1194, sid=d732d2b7 6bb83800
Wed Nov 02 12:30:18 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:30:18 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:30:18 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:30:18 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:30:18 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:30:18 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:30:18 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:30:18 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:30:18 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:30:19 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:30:19 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:30:19 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:30:19 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:30:19 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:30:19 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:30:19 2011 Initialization Sequence Completed
Wed Nov 02 12:32:20 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:32:20 2011 TCP/UDP: Closing socket
Wed Nov 02 12:32:20 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:32:20 2011 Restart pause, 2 second(s)
Wed Nov 02 12:32:22 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:32:22 2011 Re-using SSL/TLS context
Wed Nov 02 12:32:22 2011 LZO compression initialized
Wed Nov 02 12:32:22 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:32:22 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:32:22 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:32:22 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:32:22 2011 UDPv4 link local: [undef]
Wed Nov 02 12:32:22 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:32:22 2011 TLS: Initial packet from 192.168.1.5:1194, sid=7c95a4f0 794f8313
Wed Nov 02 12:32:22 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:32:22 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:32:22 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:32:23 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:32:23 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:32:23 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:32:23 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:32:23 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:32:23 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:32:24 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:32:24 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:32:24 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:32:24 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:32:24 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:32:24 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:32:24 2011 Initialization Sequence Completed
Wed Nov 02 12:34:24 2011 [debian] Inactivity timeout (--ping-restart), restarting
Wed Nov 02 12:34:24 2011 TCP/UDP: Closing socket
Wed Nov 02 12:34:24 2011 SIGUSR1[soft,ping-restart] received, process restarting
Wed Nov 02 12:34:24 2011 Restart pause, 2 second(s)
Wed Nov 02 12:34:26 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Nov 02 12:34:26 2011 Re-using SSL/TLS context
Wed Nov 02 12:34:26 2011 LZO compression initialized
Wed Nov 02 12:34:26 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Nov 02 12:34:26 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Nov 02 12:34:26 2011 Local Options hash (VER=V4): '41690919'
Wed Nov 02 12:34:26 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Nov 02 12:34:26 2011 UDPv4 link local: [undef]
Wed Nov 02 12:34:26 2011 UDPv4 link remote: 192.168.1.5:1194
Wed Nov 02 12:34:26 2011 TLS: Initial packet from 192.168.1.5:1194, sid=f17fcbe1 a1a5898d
Wed Nov 02 12:34:26 2011 VERIFY OK: depth=1, /C=IT/ST=IT/L=Milano/O=Casa/OU=Casa/CN=Casa_CA/name=Massimo/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:34:26 2011 VERIFY OK: nsCertType=SERVER
Wed Nov 02 12:34:26 2011 VERIFY OK: depth=0, /C=IT/ST=CA/L=Milano/O=Casa/CN=debian/emailAddress=betastyle07@gmail.com
Wed Nov 02 12:34:27 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:34:27 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:34:27 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 02 12:34:27 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 02 12:34:27 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Nov 02 12:34:27 2011 [debian] Peer Connection Initiated with 192.168.1.5:1194
Wed Nov 02 12:34:28 2011 SENT CONTROL [debian]: 'PUSH_REQUEST' (status=1)
Wed Nov 02 12:34:28 2011 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.10 10.8.0.9'
Wed Nov 02 12:34:28 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.9)
Wed Nov 02 12:34:28 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 02 12:34:28 2011 OPTIONS IMPORT: route options modified
Wed Nov 02 12:34:28 2011 Preserving previous TUN/TAP instance: Connessione alla rete locale (LAN)
Wed Nov 02 12:34:28 2011 Initialization Sequence Completed

route http://imageshack.us/photo/my-images/58 ... ineez.png/

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 12:53 pm
by Mimiko
Don't add manualy that route. Run OpenVPN with elevated privileges. The logs are saying that routes can'not be added - it mostly because insuficient privileges.

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 1:45 pm
by macbox
mmm i run as administrator openvpn but doesn't works

openvpn log:

Wed Nov 02 14:41:26 2011 Route addition via IPAPI failed
Wed Nov 02 14:41:26 2011 route ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.9
Wed Nov 02 14:41:26 2011 ROUTE: route addition failed using CreateIpForwardEntry: Uno o pi˘ argomenti non validi. [if_index=18]
Wed Nov 02 14:41:26 2011 Route addition via IPAPI failed
Wed Nov 02 14:41:26 2011 Initialization Sequence Completed

Re: client inside lan can not ping a server vpn

Posted: Wed Nov 02, 2011 2:02 pm
by macbox
I have installed the last version of openvpn works!!!!!

you were right!

Thankssss!!!!!!! :) :) :) :)