Hi folks
I want to open a vpn tunnnel form a W2K client through GPRS to the
server. There was a thread a while ago on this subject but did not come
to a conclusive state. I observe that as soon as the Openvpn routes get
pushed the default route is lost and of course the underlying protocol
does not work anymore.
Connections over a traditional line work fine.
Server is 2.0 On Suse 8.2 compiled from source, client is the actual
WinDoze GUI distro in non admin mode (service).
here is the log:
Fri May 27 13:20:37 2005 OpenVPN 2.0 Win32-MinGW [SSL] [LZO] built on
Apr 17 2005
Fri May 27 13:20:37 2005 IMPORTANT: OpenVPN's default port number is now
1194, based on an official port number assignment by IANA. OpenVPN
2.0-beta16 and earlier used 5000 as the default port.
Fri May 27 13:20:37 2005 LZO compression initialized
Fri May 27 13:20:37 2005 Control Channel MTU parms [ L:1542 D:138 EF:38
EB:0 ET:0 EL:0 ]
Fri May 27 13:20:38 2005 Data Channel MTU parms [ L:1542 D:1450 EF:42
EB:23 ET:0 EL:0 AF:3/1 ]
Fri May 27 13:20:38 2005 Local Options hash (VER=V4): '41690919'
Fri May 27 13:20:38 2005 Expected Remote Options hash (VER=V4): '530fdded'
Fri May 27 13:20:38 2005 UDPv4 link local: [undef]
Fri May 27 13:20:38 2005 UDPv4 link remote: 195.65.112.107:35000
Fri May 27 13:20:38 2005 TLS: Initial packet from 195.65.112.107:35000,
sid=f166aaae 2d726937
Fri May 27 13:20:42 2005 VERIFY OK: depth=1,
/C=CH/L=Schlieren/O=Ruf_Telematik/OU=SI/CN=RufMobile
Fri May 27 13:20:42 2005 VERIFY X509NAME OK:
/C=CH/L=Schlieren/O=Ruf_Telematik/OU=SI/CN=openvpn.asp.ruf.ch/emailAddress=openvpn@...
Fri May 27 13:20:42 2005 VERIFY OK: depth=0,
/C=CH/L=Schlieren/O=Ruf_Telematik/OU=SI/CN=openvpn.asp.ruf.ch/emailAddress=openvpn@...
Fri May 27 13:20:54 2005 Data Channel Encrypt: Cipher 'BF-CBC'
initialized with 128 bit key
Fri May 27 13:20:54 2005 Data Channel Encrypt: Using 160 bit message
hash 'SHA1' for HMAC authentication
Fri May 27 13:20:54 2005 Data Channel Decrypt: Cipher 'BF-CBC'
initialized with 128 bit key
Fri May 27 13:20:54 2005 Data Channel Decrypt: Using 160 bit message
hash 'SHA1' for HMAC authentication
Fri May 27 13:20:54 2005 Control Channel: TLSv1, cipher TLSv1/SSLv3
DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 27 13:20:54 2005 [openvpn.asp.ruf.ch] Peer Connection Initiated
with 195.65.112.107:35000
Fri May 27 13:20:55 2005 SENT CONTROL [openvpn.asp.ruf.ch]:
'PUSH_REQUEST' (status=1)
Fri May 27 13:20:56 2005 PUSH: Received control message:
'PUSH_REPLY,route 172.27.0.0 255.255.0.0,dhcp-option DNS
172.27.17.100,route 172.28.0.1,ping 10,ping-restart 120,ifconfig
172.28.0.6 172.28.0.5'
Fri May 27 13:20:56 2005 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 27 13:20:56 2005 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 27 13:20:56 2005 OPTIONS IMPORT: route options modified
Fri May 27 13:20:56 2005 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option
options modified
Fri May 27 13:20:56 2005 TAP-WIN32 device [LAN-Verbindung 3] opened:
\\.\Global\{48BF72AE-81B6-4022-8CD0-9DC419155ACC}.tap
Fri May 27 13:20:56 2005 TAP-Win32 Driver Version 8.1
Fri May 27 13:20:56 2005 TAP-Win32 MTU=1500
Fri May 27 13:20:56 2005 Notified TAP-Win32 driver to set a DHCP
IP/netmask of 172.28.0.6/255.255.255.252 on interface
{48BF72AE-81B6-4022-8CD0-9DC419155ACC} [DHCP-serv: 172.28.0.5,
lease-time: 31536000]
Fri May 27 13:20:56 2005 Successful ARP Flush on interface [318767109]
{48BF72AE-81B6-4022-8CD0-9DC419155ACC}
Fri May 27 13:20:56 2005 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Fri May 27 13:20:56 2005 Route: Waiting for TUN/TAP interface to come up...
Fri May 27 13:20:57 2005 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Fri May 27 13:20:57 2005 Route: Waiting for TUN/TAP interface to come up...
Fri May 27 13:20:58 2005 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Fri May 27 13:20:58 2005 Route: Waiting for TUN/TAP interface to come up...
Fri May 27 13:21:00 2005 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Fri May 27 13:21:00 2005 Route: Waiting for TUN/TAP interface to come up...
Fri May 27 13:21:01 2005 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Fri May 27 13:21:01 2005 route ADD 172.27.0.0 MASK 255.255.0.0 172.28.0.5
Fri May 27 13:21:01 2005 Route addition via IPAPI succeeded
Fri May 27 13:21:01 2005 route ADD 172.28.0.1 MASK 255.255.255.255
172.28.0.5
Fri May 27 13:21:01 2005 Route addition via IPAPI succeeded
Fri May 27 13:21:01 2005 Initialization Sequence Completed
Fri May 27 13:21:17 2005 write UDPv4: No Route to Host (WSAEHOSTUNREACH)
(code=10065) .........
thanks
Erich
|