|
|
Hi,
I'm trying to make a VPN connection from openvpn 2.0.9 on RHL7 to openvpn
2.0.7 on CentOS 4.4. I've attempted to follow the instructions from
http://openvpn.net/howto.html#quick
The CentOS box is the server in my environment and the RHL7 box is the client.
I created the server keys and the client keys on the CentOS box and scp'd the
client keys to the RHL7 box.
I can start the server on the CentOS box and sorta get a connection from the
RHL7 client. This is the text of the output when running
# openvpn /etc/openvpn/server.conf
Tue Jan 9 15:17:31 2007 OpenVPN 2.0.7 i386-redhat-linux-gnu [SSL] [LZO]
[EPOLL] built on Apr 29 2006
Tue Jan 9 15:17:31 2007 Diffie-Hellman initialized with 1024 bit key
Tue Jan 9 15:17:31 2007 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0
EL:0 ]
Tue Jan 9 15:17:31 2007 TUN/TAP device tun0 opened
Tue Jan 9 15:17:31 2007 /sbin/ip link set dev tun0 up mtu 1500
Tue Jan 9 15:17:31 2007 /sbin/ip addr add dev tun0 local 10.8.0.1 peer
10.8.0.2Tue Jan 9 15:17:31 2007 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Tue Jan 9 15:17:31 2007 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135
ET:0 EL:0 AF:3/1 ]
Tue Jan 9 15:17:31 2007 GID set to nobody
Tue Jan 9 15:17:31 2007 UID set to nobody
Tue Jan 9 15:17:31 2007 Listening for incoming TCP connection on [undef]:1194
Tue Jan 9 15:17:31 2007 TCPv4_SERVER link local (bound): [undef]:1194
Tue Jan 9 15:17:31 2007 TCPv4_SERVER link remote: [undef]
Tue Jan 9 15:17:31 2007 MULTI: multi_init called, r=256 v=256
Tue Jan 9 15:17:31 2007 IFCONFIG POOL: base=10.8.0.4 size=62
Tue Jan 9 15:17:31 2007 IFCONFIG POOL LIST
Tue Jan 9 15:17:31 2007 ServerName,10.8.0.4
Tue Jan 9 15:17:31 2007 MULTI: TCP INIT maxclients=1024 maxevents=1028
Tue Jan 9 15:17:31 2007 Initialization Sequence Completed
# egrep -v "^(#|*$|;)" server.conf
port 1194
proto tcp
dev tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
and when running
# openvpn ./client.conf
Tue Jan 9 14:54:14 2007 VERIFY OK:
depth=0, /C=US/ST=NA/O=OrgName/CN=CommonName/Email=my@xxxxxxxxxx
Tue Jan 9 14:54:14 2007 Data Channel Encrypt: Cipher 'BF-CBC' initialized
with 128 bit key
Tue Jan 9 14:54:14 2007 Data Channel Encrypt: Using 160 bit message
hash 'SHA1' for HMAC authentication
Tue Jan 9 14:54:14 2007 Data Channel Decrypt: Cipher 'BF-CBC' initialized
with 128 bit key
Tue Jan 9 14:54:14 2007 Data Channel Decrypt: Using 160 bit message
hash 'SHA1' for HMAC authentication
Tue Jan 9 14:54:14 2007 Control Channel: TLSv1, cipher TLSv1/SSLv3
EDH-RSA-DES-CBC3-SHA, 1024 bit RSA
Tue Jan 9 14:54:14 2007 [ServerName] Peer Connection Initiated with
192.168.1.252:1194
Tue Jan 9 14:54:15 2007 SENT CONTROL [ServerName]: 'PUSH_REQUEST'
(status=1)Tue Jan 9 14:54:15 2007 PUSH: Received control
message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,ping 10,ping-restart
120,ifconfig 10.8.0.6 10.8.0.5'
Tue Jan 9 14:54:15 2007 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jan 9 14:54:15 2007 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jan 9 14:54:15 2007 OPTIONS IMPORT: route options modified
Tue Jan 9 14:54:15 2007 Cannot allocate TUN/TAP dev dynamically
Tue Jan 9 14:54:15 2007 Exiting
# egrep -v "^(#|*$|;)" client.conf
client
dev tun
proto tcp
remote serverDomain 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/clientkeys/ca.crt
cert /etc/openvpn/clientkeys/client.crt
key /etc/openvpn/clientkeys/client.key
comp-lzo
verb 3
What am I missing?
Thanks,
Tim
--
Fedora Core release 5 (Bordeaux), Linux 2.6.18-1.2257.fc5
14:50:01 up 6 days, 35 min, 2 users, load average: 0.36, 0.28, 0.19
MP3/OGG archive Total playlength : 9 days, 8 hours, 14 mins 50 seconds
"It's what you learn after you know it all that counts" John Wooden
Attachment:
pgpybSTXLI2QG.pgp
Description: PGP signature
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users
|