|
From: Tim W. <ti...@th...> - 2007-01-09 20:35:41
|
Hi,=20 I'm trying to make a VPN connection from openvpn 2.0.9 on RHL7 to openvpn=20 2.0.7 on CentOS 4.4. I've attempted to follow the instructions from=20 http://openvpn.net/howto.html#quick The CentOS box is the server in my environment and the RHL7 box is the clie= nt.=20 I created the server keys and the client keys on the CentOS box and scp'd t= he=20 client keys to the RHL7 box. I can start the server on the CentOS box and sorta get a connection from th= e=20 RHL7 client. This is the text of the output when running=20 # openvpn /etc/openvpn/server.conf Tue Jan 9 15:17:31 2007 OpenVPN 2.0.7 i386-redhat-linux-gnu [SSL] [LZO]=20 [EPOLL] built on Apr 29 2006 Tue Jan 9 15:17:31 2007 Diffie-Hellman initialized with 1024 bit key Tue Jan 9 15:17:31 2007 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0= =20 EL:0 ] Tue Jan 9 15:17:31 2007 TUN/TAP device tun0 opened Tue Jan 9 15:17:31 2007 /sbin/ip link set dev tun0 up mtu 1500 Tue Jan 9 15:17:31 2007 /sbin/ip addr add dev tun0 local 10.8.0.1 peer=20 10.8.0.2Tue Jan 9 15:17:31 2007 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2 Tue Jan 9 15:17:31 2007 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:13= 5=20 ET:0 EL:0 AF:3/1 ] Tue Jan 9 15:17:31 2007 GID set to nobody Tue Jan 9 15:17:31 2007 UID set to nobody Tue Jan 9 15:17:31 2007 Listening for incoming TCP connection on [undef]:1= 194 Tue Jan 9 15:17:31 2007 TCPv4_SERVER link local (bound): [undef]:1194 Tue Jan 9 15:17:31 2007 TCPv4_SERVER link remote: [undef] Tue Jan 9 15:17:31 2007 MULTI: multi_init called, r=3D256 v=3D256 Tue Jan 9 15:17:31 2007 IFCONFIG POOL: base=3D10.8.0.4 size=3D62 Tue Jan 9 15:17:31 2007 IFCONFIG POOL LIST Tue Jan 9 15:17:31 2007 ServerName,10.8.0.4 Tue Jan 9 15:17:31 2007 MULTI: TCP INIT maxclients=3D1024 maxevents=3D1028 Tue Jan 9 15:17:31 2007 Initialization Sequence Completed # egrep -v "^(#|*$|;)" server.conf port 1194 proto tcp dev tun ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/server.crt key /etc/openvpn/server.key # This file should be kept secret dh /etc/openvpn/easy-rsa/keys/dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt client-to-client keepalive 10 120 comp-lzo user nobody group nobody persist-key persist-tun status openvpn-status.log verb 3 and when running # openvpn ./client.conf Tue Jan 9 14:54:14 2007 VERIFY OK:=20 depth=3D0, /C=3DUS/ST=3DNA/O=3DOrgName/CN=3DCommonName/Ema...@e-... Tue Jan 9 14:54:14 2007 Data Channel Encrypt: Cipher 'BF-CBC' initialized= =20 with 128 bit key Tue Jan 9 14:54:14 2007 Data Channel Encrypt: Using 160 bit message=20 hash 'SHA1' for HMAC authentication Tue Jan 9 14:54:14 2007 Data Channel Decrypt: Cipher 'BF-CBC' initialized= =20 with 128 bit key Tue Jan 9 14:54:14 2007 Data Channel Decrypt: Using 160 bit message=20 hash 'SHA1' for HMAC authentication Tue Jan 9 14:54:14 2007 Control Channel: TLSv1, cipher TLSv1/SSLv3=20 EDH-RSA-DES-CBC3-SHA, 1024 bit RSA Tue Jan 9 14:54:14 2007 [ServerName] Peer Connection Initiated with=20 192.168.1.252:1194 Tue Jan 9 14:54:15 2007 SENT CONTROL [ServerName]: 'PUSH_REQUEST'=20 (status=3D1)Tue Jan 9 14:54:15 2007 PUSH: Received control=20 message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,ping 10,ping-restart=20 120,ifconfig 10.8.0.6 10.8.0.5' Tue Jan 9 14:54:15 2007 OPTIONS IMPORT: timers and/or timeouts modified Tue Jan 9 14:54:15 2007 OPTIONS IMPORT: --ifconfig/up options modified Tue Jan 9 14:54:15 2007 OPTIONS IMPORT: route options modified Tue Jan 9 14:54:15 2007 Cannot allocate TUN/TAP dev dynamically Tue Jan 9 14:54:15 2007 Exiting # egrep -v "^(#|*$|;)" client.conf client dev tun proto tcp remote serverDomain 1194 resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ca /etc/openvpn/clientkeys/ca.crt cert /etc/openvpn/clientkeys/client.crt key /etc/openvpn/clientkeys/client.key comp-lzo verb 3 What am I missing? Thanks,=20 Tim =2D-=20 =46edora Core release 5 (Bordeaux), Linux 2.6.18-1.2257.fc5 14:50:01 up 6 days, 35 min, 2 users, load average: 0.36, 0.28, 0.19 MP3/OGG archive Total playlength : 9 days, 8 hours, 14 mins 50 seconds "It's what you learn after you know it all that counts" John Wooden |