|
From: Joselito T. <jos...@gm...> - 2011-05-31 06:12:19
|
Hi, I would like to consult regarding this issue of OpenVPN I installed using CentOS. I followed this link in setting up OpenVPN http://www.howtoforge.com/openvpn-server-on-centos-5.2. I completely followed the instructions. However there is an issue after installing the OpenVPN. When I tried to start OpenVPN using this command with a root access. #/etc/init.d/openvpn start* *I received failed error. And when i try to see the logs. I found out this error. "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16) Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to kernel 2.2 TUN/TAP interface Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev /dev/tun0: No such file or directory (errno=2) Tue May 31 09:58:43 2011 us=705811 Exiting" I try to search solution using google. But I am failed. So I decided to send an email to you to help me with this problem of mine. Please send me a guide or steps how to solve the problem Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014. http://joselitotapangan.info http://jetzumy2k.wordpress.com http://jetzumy2k.byethost18.com http://onlinereference.wordpress.com |
|
From: Jan J. K. <ja...@ni...> - 2011-05-31 08:46:37
|
Hi, Joselito Tapangan wrote: > Hi, > > I would like to consult regarding this issue of OpenVPN I installed > using CentOS. I followed this link in setting up OpenVPN > http://www.howtoforge.com/openvpn-server-on-centos-5.2. I completely > followed the instructions. However there is an issue after installing > the OpenVPN. When I tried to start OpenVPN using this command with a > root access. > > #/etc/init.d/openvpn start* > > *I received failed error. And when i try to see the logs. I found out > this error. > > "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl TUNSETIFF tun0: > Device or resource busy (errno=16) > Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to kernel > 2.2 TUN/TAP interface > Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev /dev/tun0: > No such file or directory (errno=2) > Tue May 31 09:58:43 2011 us=705811 Exiting" > > I try to search solution using google. But I am failed. So I decided > to send an email to you to help me with this problem of mine. Please > send me a guide or steps how to solve the problem did you specify dev tun0 explicitly in the config file? try using dev tun Is your server configuration identical to the one in the HOWTOforge.com ? Is the 'tun' module loaded before OpenVPN is started ? Are you running natively or are you running on e.g. OpenVZ / VPS ? cheers, JJK |
|
From: Joselito T. <jos...@gm...> - 2011-06-02 00:44:23
|
Here is the content of my Config File; *port 1194 proto udp dev tun0 ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/server.crt key /etc/openvpn/keys/server.key dh /etc/openvpn/keys/dh1024.pem server 10.10.0.0 255.255.255.0 client-config-dir ccd push "dhcp-option DNS " push "dhcp-option DNS " push "dhcp-option DISABLE-NBT" push "dhcp-option DOMAIN " push "route 192.168.0.0 255.255.255.0" push "redirect-gateway def1" keepalive 10 120 comp-lzo persist-key persist-tun status /var/log/openvpn/server-tcp.log ifconfig-pool-persist /var/log/openvpn/ipp.txt log-append /var/log/openvpn/openvpn.log verb 4 client-to-client duplicate-cn user nobody group nobody* I already did change the dev tun0 to dev tun in the config file but I still It has an error. The only thing not identical to the HOWTOforge.com is the Version of CentOS and the Version of OpenVPN cause I am using the latest. I am also running this natively. The only thing I am confused is that how to see if the tun module is running. Anyone could tell how to check it? explicitly in the config file? try using dev tun Is your server configuration identical to the one in the HOWTOforge.com ? Is the 'tun' module loaded before OpenVPN is started ? Are you running natively or are you running on e.g. OpenVZ / VPS ? Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014. http://joselitotapangan.info http://jetzumy2k.wordpress.com http://jetzumy2k.byethost18.com http://onlinereference.wordpress.com On Tue, May 31, 2011 at 4:46 PM, Jan Just Keijser <ja...@ni...> wrote: > did you specify > dev tun0 > explicitly in the config file? try using > dev tun > Is your server configuration identical to the one in the HOWTOforge.com ? > Is the 'tun' module loaded before OpenVPN is started ? > Are you running natively or are you running on e.g. OpenVZ / VPS ? > |
|
From: Jan J. K. <ja...@ni...> - 2011-06-02 20:42:57
|
do (as root) modinfo tun modprobe tun if the second command returns an error , then there's something wrong with your CentOS installation ; after the 'modprobe' do an lsmod | grep tun to see if the device is actually listed. HTH, JJK Joselito Tapangan wrote: > Here is the content of my Config File; > > /port 1194 > proto udp > dev tun0 > > ca /etc/openvpn/keys/ca.crt > cert /etc/openvpn/keys/server.crt > key /etc/openvpn/keys/server.key > dh /etc/openvpn/keys/dh1024.pem > > server 10.10.0.0 255.255.255.0 > client-config-dir ccd > push "dhcp-option DNS " > push "dhcp-option DNS " > push "dhcp-option DISABLE-NBT" > push "dhcp-option DOMAIN " > push "route 192.168.0.0 255.255.255.0" > push "redirect-gateway def1" > keepalive 10 120 > comp-lzo > persist-key > persist-tun > status /var/log/openvpn/server-tcp.log > ifconfig-pool-persist /var/log/openvpn/ipp.txt > log-append /var/log/openvpn/openvpn.log > verb 4 > client-to-client > duplicate-cn > > user nobody > group nobody/ > > > I already did change the dev tun0 to dev tun in the config file but I > still It has an error. The only thing not identical to the > HOWTOforge.com is the Version of CentOS and the Version of OpenVPN > cause I am using the latest. I am also running this natively. The only > thing I am confused is that how to see if the tun module is running. > Anyone could tell how to check it? > > explicitly in the config file? try using > dev tun > > Is your server configuration identical to the one in the HOWTOforge.com ? > Is the 'tun' module loaded before OpenVPN is started ? > Are you running natively or are you running on e.g. OpenVZ / VPS ? > |
|
From: Joselito T. <jos...@gm...> - 2011-06-03 00:35:01
|
Hi, When I run as root the command modinfo tun the display is this. * filename: /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko alias: char-major-10-200 license: GPL author: (C) 1999-2004 Max Krasnyansky <ma...@qu...> description: Universal TUN/TAP device driver srcversion: 23EC8E176639DE5F2DA2D21 depends: vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 REGPARM 4KSTACKS gcc-4.1 module_sig: 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 * When I run as root the modprobe tun. There is no error display but also there is no output. It goes directly to the prompt. Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014. http://joselitotapangan.info http://jetzumy2k.wordpress.com http://jetzumy2k.byethost18.com http://onlinereference.wordpress.com On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser <ja...@ni...> wrote: > do (as root) > modinfo tun > modprobe tun > > if the second command returns an error , then there's something wrong with > your CentOS installation ; after the 'modprobe' do an > lsmod | grep tun > to see if the device is actually listed. > > HTH, > > JJK > > > > > Joselito Tapangan wrote: > >> Here is the content of my Config File; >> >> /port 1194 >> proto udp >> dev tun0 >> >> ca /etc/openvpn/keys/ca.crt >> cert /etc/openvpn/keys/server.crt >> key /etc/openvpn/keys/server.key >> dh /etc/openvpn/keys/dh1024.pem >> >> server 10.10.0.0 255.255.255.0 >> client-config-dir ccd >> push "dhcp-option DNS " >> push "dhcp-option DNS " >> push "dhcp-option DISABLE-NBT" >> push "dhcp-option DOMAIN " >> push "route 192.168.0.0 255.255.255.0" >> push "redirect-gateway def1" >> keepalive 10 120 >> comp-lzo >> persist-key >> persist-tun >> status /var/log/openvpn/server-tcp.log >> ifconfig-pool-persist /var/log/openvpn/ipp.txt >> log-append /var/log/openvpn/openvpn.log >> verb 4 >> client-to-client >> duplicate-cn >> >> user nobody >> group nobody/ >> >> >> I already did change the dev tun0 to dev tun in the config file but I >> still It has an error. The only thing not identical to the HOWTOforge.com is >> the Version of CentOS and the Version of OpenVPN cause I am using the >> latest. I am also running this natively. The only thing I am confused is >> that how to see if the tun module is running. Anyone could tell how to check >> it? >> >> explicitly in the config file? try using >> dev tun >> >> Is your server configuration identical to the one in the HOWTOforge.com ? >> Is the 'tun' module loaded before OpenVPN is started ? >> Are you running natively or are you running on e.g. OpenVZ / VPS ? >> >> > |
|
From: David S. <ope...@to...> - 2011-06-03 07:32:59
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/06/11 02:34, Joselito Tapangan wrote: > Hi, > > When I run as root the command modinfo tun the display is this. > / > filename: /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko > alias: char-major-10-200 > license: GPL > author: (C) 1999-2004 Max Krasnyansky <ma...@qu... > <mailto:ma...@qu...>> > description: Universal TUN/TAP device driver > srcversion: 23EC8E176639DE5F2DA2D21 > depends: > vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 REGPARM 4KSTACKS gcc-4.1 > module_sig: > 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 > / > When I run as root the modprobe tun. There is no error display but also > there is no output. It goes directly to the prompt. > [please, don't top post] When modprobe do give any output, it means everything is okay. The command most likely worked fine. You can verify that by doing as JJK suggested: lsmod | grep tun If you see a line with 'tun' listed, it means the tun module is loaded and ready to be used. kind regards, David Sommerseth > On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser <ja...@ni... > <mailto:ja...@ni...>> wrote: > > do (as root) > modinfo tun > modprobe tun > > if the second command returns an error , then there's something wrong > with your CentOS installation ; after the 'modprobe' do an > lsmod | grep tun > to see if the device is actually listed. > > HTH, > > JJK > [...snip...] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk3ojh0ACgkQDC186MBRfro5TgCgig5fz6v2xFXJ68tS5dB3IHNw lwAAnifkPMnbsfdijj+elw8bNq6Q26oo =zv0W -----END PGP SIGNATURE----- |
|
From: David S. <ope...@to...> - 2011-06-03 08:02:51
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/06/11 09:32, David Sommerseth wrote: > On 03/06/11 02:34, Joselito Tapangan wrote: >> Hi, > >> When I run as root the command modinfo tun the display is this. >> / >> filename: /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko >> alias: char-major-10-200 >> license: GPL >> author: (C) 1999-2004 Max Krasnyansky <ma...@qu... >> <mailto:ma...@qu...>> >> description: Universal TUN/TAP device driver >> srcversion: 23EC8E176639DE5F2DA2D21 >> depends: >> vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 REGPARM 4KSTACKS gcc-4.1 >> module_sig: >> 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 >> / >> When I run as root the modprobe tun. There is no error display but also >> there is no output. It goes directly to the prompt. > > > [please, don't top post] > > When modprobe do give any output, it means everything is okay. The command Whoops ... I meant: When modprobe *does not* give any output ... Sorry about that! David S. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk3olR4ACgkQDC186MBRfrrLlwCeMB6H944f84690/esXrljL/rL AD4AoJbm2dw7IZ7LhgKLV1KISZhj+foa =XO9/ -----END PGP SIGNATURE----- |
|
From: Joselito T. <jos...@gm...> - 2011-06-03 08:39:24
|
On Fri, Jun 3, 2011 at 3:32 PM, David Sommerseth < ope...@to...> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 03/06/11 02:34, Joselito Tapangan wrote: > > Hi, > > > > When I run as root the command modinfo tun the display is this. > > / > > filename: > /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko > > alias: char-major-10-200 > > license: GPL > > author: (C) 1999-2004 Max Krasnyansky <ma...@qu... > > <mailto:ma...@qu...>> > > description: Universal TUN/TAP device driver > > srcversion: 23EC8E176639DE5F2DA2D21 > > depends: > > vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 REGPARM 4KSTACKS > gcc-4.1 > > module_sig: > > 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271 > f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 > > / > > When I run as root the modprobe tun. There is no error display but also > > there is no output. It goes directly to the prompt. > > > > [please, don't top post] > > When modprobe do give any output, it means everything is okay. The command > most likely worked fine. You can verify that by doing as JJK suggested: > > lsmod | grep tun > > If you see a line with 'tun' listed, it means the tun module is loaded and > ready to be used. > > > kind regards, > > David Sommerseth > > > > On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser <ja...@ni... > > <mailto:ja...@ni...>> wrote: > > > > do (as root) > > modinfo tun > > modprobe tun > > > > if the second command returns an error , then there's something wrong > > with your CentOS installation ; after the 'modprobe' do an > > lsmod | grep tun > > to see if the device is actually listed. > > > > HTH, > > > > JJK > > > > [...snip...] > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (GNU/Linux) > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ > > iEYEARECAAYFAk3ojh0ACgkQDC186MBRfro5TgCgig5fz6v2xFXJ68tS5dB3IHNw > lwAAnifkPMnbsfdijj+elw8bNq6Q26oo > =zv0W > -----END PGP SIGNATURE----- > As what have you said, If there is no error the tun module is probably is running and ready to use. However the main problem of mine is the OpenVPN itself when I tried to run It failed and when I try to see the logs. This is what I found in the error log; * "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16) Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to kernel 2.2 TUN/TAP interface Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev /dev/tun0: No such file or directory (errno=2) Tue May 31 09:58:43 2011 us=705811 Exiting"* What I need to know how to solve this problem Since we all know the module of tun is running, Any other possible reason why I commit that error? If there is so How can I do such solution? Your help is a great appreciated. Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014. http://joselitotapangan.info http://jetzumy2k.wordpress.com http://jetzumy2k.byethost18.com http://onlinereference.wordpress.com |
|
From: David S. <ope...@to...> - 2011-06-03 09:51:55
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/06/11 10:39, Joselito Tapangan wrote: > > On Fri, Jun 3, 2011 at 3:32 PM, David Sommerseth > <ope...@to... <mailto:ope...@to...>> wrote: > > On 03/06/11 02:34, Joselito Tapangan wrote: >> Hi, > >> When I run as root the command modinfo tun the display is this. [...snip...] >> When I run as root the modprobe tun. There is no error display but also >> there is no output. It goes directly to the prompt. > > > [please, don't top post] > > When modprobe do give any output, it means everything is okay. The command > most likely worked fine. You can verify that by doing as JJK suggested: > > lsmod | grep tun > > If you see a line with 'tun' listed, it means the tun module is loaded and > ready to be used. > > > kind regards, > > David Sommerseth > > >> On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser <ja...@ni... > <mailto:ja...@ni...> >> <mailto:ja...@ni... <mailto:ja...@ni...>>> wrote: > >> do (as root) >> modinfo tun >> modprobe tun > >> if the second command returns an error , then there's something wrong >> with your CentOS installation ; after the 'modprobe' do an >> lsmod | grep tun >> to see if the device is actually listed. > >> HTH, > >> JJK > > > [...snip...] > As what have you said, If there is no error the tun module is probably is > running and ready to use. However the main problem of mine is the OpenVPN > itself when I tried to run It failed and when I try to see the logs. > This is what I found in the error log; > / > "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl TUNSETIFF tun0: > Device or resource busy (errno=16) > Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to kernel 2.2 > TUN/TAP interface > Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev /dev/tun0: No > such file or directory (errno=2) > Tue May 31 09:58:43 2011 us=705811 Exiting"/ > What I need to know how to solve this problem Since we all know the module > of tun is running, Any other possible reason why I commit that error? If > there is so How can I do such solution? Your help is a great appreciated. You have most likely another process (openvpn?) running which uses tun0. That's what the first error (errno=16) means. If you config uses: dev tun0 Then this will cause this error. Try changing that to either: dev tun or to: dev tun1 If you use the former (dev tun), OpenVPN will take the first available "slot". So if tun0 is in use, it will try tun1, tun2, tun3, etc until it finds a suitable tun device. The second error can be a bit misleading, but this is OpenVPN trying to use an different approach to create the tun device, for older Linux kernels. This error you can simply ignore. Kind regards, David Sommerseth -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk3orq0ACgkQDC186MBRfrpoeQCff4ogndQsM/JKrEuw9t7zuXwL 3T4An3Pz8KSIhYWTJlRuio74/TcSEnc6 =4UMN -----END PGP SIGNATURE----- |
|
From: Jan J. K. <ja...@ni...> - 2011-06-04 20:58:58
|
Hi, Joselito Tapangan wrote: > > On Fri, Jun 3, 2011 at 3:32 PM, David Sommerseth > <ope...@to... <mailto:ope...@to...>> > wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 03/06/11 02:34, Joselito Tapangan wrote: > > Hi, > > > > When I run as root the command modinfo tun the display is this. > > / > > filename: > /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko > > alias: char-major-10-200 > > license: GPL > > author: (C) 1999-2004 Max Krasnyansky <ma...@qu... > <mailto:ma...@qu...> > > <mailto:ma...@qu... <mailto:ma...@qu...>>> > > description: Universal TUN/TAP device driver > > srcversion: 23EC8E176639DE5F2DA2D21 > > depends: > > vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 REGPARM > 4KSTACKS gcc-4.1 > > module_sig: > > 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271 > <tel:8588888271>f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 > > / > > When I run as root the modprobe tun. There is no error display > but also > > there is no output. It goes directly to the prompt. > > > > [please, don't top post] > > When modprobe do give any output, it means everything is okay. > The command > most likely worked fine. You can verify that by doing as JJK > suggested: > > lsmod | grep tun > > If you see a line with 'tun' listed, it means the tun module is > loaded and > ready to be used. > > > kind regards, > > David Sommerseth > > > > On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser > <ja...@ni... <mailto:ja...@ni...> > > <mailto:ja...@ni... <mailto:ja...@ni...>>> wrote: > > > > do (as root) > > modinfo tun > > modprobe tun > > > > if the second command returns an error , then there's > something wrong > > with your CentOS installation ; after the 'modprobe' do an > > lsmod | grep tun > > to see if the device is actually listed. > > > > HTH, > > > > JJK > > > > [...snip...] > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (GNU/Linux) > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ > > iEYEARECAAYFAk3ojh0ACgkQDC186MBRfro5TgCgig5fz6v2xFXJ68tS5dB3IHNw > lwAAnifkPMnbsfdijj+elw8bNq6Q26oo > =zv0W > -----END PGP SIGNATURE----- > > > As what have you said, If there is no error the tun module is probably > is running and ready to use. However the main problem of mine is the > OpenVPN itself when I tried to run It failed and when I try to see the > logs. > This is what I found in the error log; > / > "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl TUNSETIFF tun0: > Device or resource busy (errno=16) > Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to kernel > 2.2 TUN/TAP interface > Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev /dev/tun0: > No such file or directory (errno=2) > Tue May 31 09:58:43 2011 us=705811 Exiting"/ > > What I need to know how to solve this problem Since we all know the > module of tun is running, Any other possible reason why I commit that > error? If there is so How can I do such solution? Your help is a great > appreciated. so the 'tun' module is loaded; which user is used to start openvpn? openvpn normally must be run as 'root' (or via 'sudo' ). also, try running, as root, openvpn --dev tun --proto udp and post the output here - on my CentOS box that gives Sat Jun 4 22:58:13 2011 TUN/TAP device tun0 opened HTH, JJK |
|
From: Jan J. K. <ja...@ni...> - 2011-06-06 06:01:47
|
Hi, Joselito Tapangan wrote: > > > > On Mon, Jun 6, 2011 at 8:24 AM, Joselito Tapangan > <jos...@gm... <mailto:jos...@gm...>> wrote: > > yes, the openVPN user the will start it is the root > > On 6/5/11, Jan Just Keijser <ja...@ni... > <mailto:ja...@ni...>> wrote: > > Hi, > > > > Joselito Tapangan wrote: > >> > >> On Fri, Jun 3, 2011 at 3:32 PM, David Sommerseth > >> <ope...@to... > <mailto:ope...@to...> > <mailto:ope...@to... > <mailto:ope...@to...>>> > >> wrote: > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> On 03/06/11 02:34, Joselito Tapangan wrote: > >> > Hi, > >> > > >> > When I run as root the command modinfo tun the display > is this. > >> > / > >> > filename: > >> /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko > >> > alias: char-major-10-200 > >> > license: GPL > >> > author: (C) 1999-2004 Max Krasnyansky > <ma...@qu... <mailto:ma...@qu...> > >> <mailto:ma...@qu... <mailto:ma...@qu...>> > >> > <mailto:ma...@qu... <mailto:ma...@qu...> > <mailto:ma...@qu... <mailto:ma...@qu...>>>> > >> > description: Universal TUN/TAP device driver > >> > srcversion: 23EC8E176639DE5F2DA2D21 > >> > depends: > >> > vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 > REGPARM > >> 4KSTACKS gcc-4.1 > >> > module_sig: > >> > 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271 > <tel:8588888271> > >> > >> <tel:8588888271 > <tel:8588888271>>f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 > >> > / > >> > When I run as root the modprobe tun. There is no error > display > >> but also > >> > there is no output. It goes directly to the prompt. > >> > > >> > >> [please, don't top post] > >> > >> When modprobe do give any output, it means everything is okay. > >> The command > >> most likely worked fine. You can verify that by doing as JJK > >> suggested: > >> > >> lsmod | grep tun > >> > >> If you see a line with 'tun' listed, it means the tun module is > >> loaded and > >> ready to be used. > >> > >> > >> kind regards, > >> > >> David Sommerseth > >> > >> > >> > On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser > >> <ja...@ni... <mailto:ja...@ni...> > <mailto:ja...@ni... <mailto:ja...@ni...>> > >> > <mailto:ja...@ni... <mailto:ja...@ni...> > <mailto:ja...@ni... <mailto:ja...@ni...>>>> wrote: > >> > > >> > do (as root) > >> > modinfo tun > >> > modprobe tun > >> > > >> > if the second command returns an error , then there's > >> something wrong > >> > with your CentOS installation ; after the 'modprobe' > do an > >> > lsmod | grep tun > >> > to see if the device is actually listed. > >> > > >> > HTH, > >> > > >> > JJK > >> > > >> > >> [...snip...] > >> -----BEGIN PGP SIGNATURE----- > >> Version: GnuPG v1.4.11 (GNU/Linux) > >> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ > >> > >> > iEYEARECAAYFAk3ojh0ACgkQDC186MBRfro5TgCgig5fz6v2xFXJ68tS5dB3IHNw > >> lwAAnifkPMnbsfdijj+elw8bNq6Q26oo > >> =zv0W > >> -----END PGP SIGNATURE----- > >> > >> > >> As what have you said, If there is no error the tun module is > probably > >> is running and ready to use. However the main problem of mine > is the > >> OpenVPN itself when I tried to run It failed and when I try to > see the > >> logs. > >> This is what I found in the error log; > >> / > >> "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl > TUNSETIFF tun0: > >> Device or resource busy (errno=16) > >> Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to > kernel > >> 2.2 TUN/TAP interface > >> Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev > /dev/tun0: > >> No such file or directory (errno=2) > >> Tue May 31 09:58:43 2011 us=705811 Exiting"/ > >> > >> What I need to know how to solve this problem Since we all know the > >> module of tun is running, Any other possible reason why I > commit that > >> error? If there is so How can I do such solution? Your help is > a great > >> appreciated. > > > > so the 'tun' module is loaded; which user is used to start openvpn? > > openvpn normally must be run as 'root' (or via 'sudo' ). > > > > also, try running, as root, > > openvpn --dev tun --proto udp > > and post the output here - on my CentOS box that gives > > Sat Jun 4 22:58:13 2011 TUN/TAP device tun0 opened > > > > HTH, > > > > JJK > > > > > > > > > > > -- > Respectfully Yours, > > Joselito E. Tapangan > Network Administrator > Booom!! Interactive, Inc. > 2F Tulips Center Bldg. > A.S. Fortuna St. > Mandaue City, Cebu > Philippines, 6014. > http://joselitotapangan.info > http://jetzumy2k.wordpress.com > http://jetzumy2k.byethost18.com > http://onlinereference.wordpress.com > > > > Hi, > > When I run this command as root the out is this; > / > # openvpn --dev tun --proto udp > > Mon Jun 6 05:39:11 2011 OpenVPN 2.1.4 i386-redhat-linux-gnu [SSL] > [LZO2] [EPOLL] [PKCS11] built on Mar 10 2011 > Mon Jun 6 05:39:11 2011 IMPORTANT: OpenVPN's default port number is > now 1194, based on an official port number assignment by IANA. > OpenVPN 2.0-beta16 and earlier used 5000 as the default port. > Mon Jun 6 05:39:11 2011 NOTE: OpenVPN 2.1 requires '--script-security > 2' or higher to call user-defined scripts or executables > Mon Jun 6 05:39:11 2011 ******* WARNING *******: all encryption and > authentication features disabled -- all data will be tunnelled as > cleartext > Mon Jun 6 05:39:11 2011 TUN/TAP device tun0 opened > Mon Jun 6 05:39:11 2011 UDPv4 link local (bound): [undef]:1194 > Mon Jun 6 05:39:11 2011 UDPv4 link remote: [undef] > / > I also tried the suggestion of David to change do some trial and error > of tun0 to tun1 or tun2. My new configuration is this; > > /port 1723 # (1194 is the default but on some APN networks this is > blocked) > proto tcp > dev tun1 > ca /etc/openvpn/keys/ca.crt > cert /etc/openvpn/keys/server.crt > key /etc/openvpn/keys/server.key > dh /etc/openvpn/keys/dh1024.pem > > server 10.10.0.0 255.255.255.0 > push "dhcp-option DNS 203.177.60.46 > push "dhcp-option DNS 8.8.8.8" > #push "dhcp-option WINS 192.168.1.2" > push "route 192.168.0.0 255.255.255.0" > ifconfig-pool-persist ipp.txt > keepalive 10 120 > comp-lzo > user nobody > group users > persist-key > persist-tun > status openvpn-status.log > verb 3 > client-to-client > duplicate-cn # (this means several users can use the same key)/ > > When I tried to start the Openvpn again it is still fail. And when I > try to see the log message the message is this; > > /Mon Jun 6 06:15:01 2011 us=353761 /sbin/ip route add 10.10.0.0/24 > <http://10.10.0.0/24> via 10.10.0.2 > Mon Jun 6 06:15:01 2011 us=354807 Data Channel MTU parms [ L:1542 > D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] > Mon Jun 6 06:15:01 2011 us=355825 GID set to nobody > Mon Jun 6 06:15:01 2011 us=355939 UID set to nobody > Mon Jun 6 06:15:01 2011 us=355998 UDPv4 link local (bound): [undef]:1723 > Mon Jun 6 06:15:01 2011 us=356026 UDPv4 link remote: [undef] > Mon Jun 6 06:15:01 2011 us=356048 MULTI: multi_init called, r=256 v=256 > Mon Jun 6 06:15:01 2011 us=356158 IFCONFIG POOL: base=10.10.0.4 size=62 > Mon Jun 6 06:15:01 2011 us=356209 IFCONFIG POOL LIST > Mon Jun 6 06:15:01 2011 us=356288 Initialization Sequence Completed/ > > this looks perfectly alright! the server has started and has initialized and is now waiting for clients to connect. I'd recommend to use dev tun instead of dev tun1 so OpenVPN can choose the first available tun device itself. HTH, JJK |
|
From: Joselito T. <jos...@gm...> - 2011-06-06 06:54:34
|
On Mon, Jun 6, 2011 at 2:01 PM, Jan Just Keijser <ja...@ni...> wrote: > Hi, > > Joselito Tapangan wrote: > >> >> >> >> On Mon, Jun 6, 2011 at 8:24 AM, Joselito Tapangan < >> jos...@gm... <mailto:jos...@gm...>> wrote: >> >> yes, the openVPN user the will start it is the root >> >> On 6/5/11, Jan Just Keijser <ja...@ni... >> <mailto:ja...@ni...>> wrote: >> > Hi, >> > >> > Joselito Tapangan wrote: >> >> >> >> On Fri, Jun 3, 2011 at 3:32 PM, David Sommerseth >> >> <ope...@to... >> <mailto:ope...@to...> >> <mailto:ope...@to... >> <mailto:ope...@to...>>> >> >> wrote: >> >> >> >> -----BEGIN PGP SIGNED MESSAGE----- >> >> Hash: SHA1 >> >> >> >> On 03/06/11 02:34, Joselito Tapangan wrote: >> >> > Hi, >> >> > >> >> > When I run as root the command modinfo tun the display >> is this. >> >> > / >> >> > filename: >> >> /lib/modules/2.6.18-194.32.1.el5/kernel/drivers/net/tun.ko >> >> > alias: char-major-10-200 >> >> > license: GPL >> >> > author: (C) 1999-2004 Max Krasnyansky >> <ma...@qu... <mailto:ma...@qu...> >> >> <mailto:ma...@qu... <mailto:ma...@qu...>> >> >> > <mailto:ma...@qu... <mailto:ma...@qu...> >> <mailto:ma...@qu... <mailto:ma...@qu...>>>> >> >> > description: Universal TUN/TAP device driver >> >> > srcversion: 23EC8E176639DE5F2DA2D21 >> >> > depends: >> >> > vermagic: 2.6.18-194.32.1.el5 SMP mod_unload 686 >> REGPARM >> >> 4KSTACKS gcc-4.1 >> >> > module_sig: >> >> > 883f3504d24ffbb59f555817d939ea9112a82c09f6a8588888271 >> <tel:8588888271> >> >> >> >> <tel:8588888271 >> >> <tel:8588888271 >> >>f5528944640a3f7bdd769eaaa760a08a76254af60772266157edea59dfbde7f294c70 >> >> > / >> >> > When I run as root the modprobe tun. There is no error >> display >> >> but also >> >> > there is no output. It goes directly to the prompt. >> >> > >> >> >> >> [please, don't top post] >> >> >> >> When modprobe do give any output, it means everything is okay. >> >> The command >> >> most likely worked fine. You can verify that by doing as JJK >> >> suggested: >> >> >> >> lsmod | grep tun >> >> >> >> If you see a line with 'tun' listed, it means the tun module is >> >> loaded and >> >> ready to be used. >> >> >> >> >> >> kind regards, >> >> >> >> David Sommerseth >> >> >> >> >> >> > On Fri, Jun 3, 2011 at 4:42 AM, Jan Just Keijser >> >> <ja...@ni... <mailto:ja...@ni...> >> <mailto:ja...@ni... <mailto:ja...@ni...>> >> >> > <mailto:ja...@ni... <mailto:ja...@ni...> >> <mailto:ja...@ni... <mailto:ja...@ni...>>>> wrote: >> >> > >> >> > do (as root) >> >> > modinfo tun >> >> > modprobe tun >> >> > >> >> > if the second command returns an error , then there's >> >> something wrong >> >> > with your CentOS installation ; after the 'modprobe' >> do an >> >> > lsmod | grep tun >> >> > to see if the device is actually listed. >> >> > >> >> > HTH, >> >> > >> >> > JJK >> >> > >> >> >> >> [...snip...] >> >> -----BEGIN PGP SIGNATURE----- >> >> Version: GnuPG v1.4.11 (GNU/Linux) >> >> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ >> >> >> >> >> iEYEARECAAYFAk3ojh0ACgkQDC186MBRfro5TgCgig5fz6v2xFXJ68tS5dB3IHNw >> >> lwAAnifkPMnbsfdijj+elw8bNq6Q26oo >> >> =zv0W >> >> -----END PGP SIGNATURE----- >> >> >> >> >> >> As what have you said, If there is no error the tun module is >> probably >> >> is running and ready to use. However the main problem of mine >> is the >> >> OpenVPN itself when I tried to run It failed and when I try to >> see the >> >> logs. >> >> This is what I found in the error log; >> >> / >> >> "Tue May 31 09:58:43 2011 us=705749 Note: Cannot ioctl >> TUNSETIFF tun0: >> >> Device or resource busy (errno=16) >> >> Tue May 31 09:58:43 2011 us=705763 Note: Attempting fallback to >> kernel >> >> 2.2 TUN/TAP interface >> >> Tue May 31 09:58:43 2011 us=705787 Cannot open TUN/TAP dev >> /dev/tun0: >> >> No such file or directory (errno=2) >> >> Tue May 31 09:58:43 2011 us=705811 Exiting"/ >> >> >> >> What I need to know how to solve this problem Since we all know the >> >> module of tun is running, Any other possible reason why I >> commit that >> >> error? If there is so How can I do such solution? Your help is >> a great >> >> appreciated. >> > >> > so the 'tun' module is loaded; which user is used to start openvpn? >> > openvpn normally must be run as 'root' (or via 'sudo' ). >> > >> > also, try running, as root, >> > openvpn --dev tun --proto udp >> > and post the output here - on my CentOS box that gives >> > Sat Jun 4 22:58:13 2011 TUN/TAP device tun0 opened >> > >> > HTH, >> > >> > JJK >> > >> > >> > >> > >> >> >> -- >> Respectfully Yours, >> >> Joselito E. Tapangan >> Network Administrator >> Booom!! Interactive, Inc. >> 2F Tulips Center Bldg. >> A.S. Fortuna St. >> Mandaue City, Cebu >> Philippines, 6014. >> http://joselitotapangan.info >> http://jetzumy2k.wordpress.com >> http://jetzumy2k.byethost18.com >> http://onlinereference.wordpress.com >> >> >> >> Hi, >> >> When I run this command as root the out is this; >> / >> # openvpn --dev tun --proto udp >> >> Mon Jun 6 05:39:11 2011 OpenVPN 2.1.4 i386-redhat-linux-gnu [SSL] [LZO2] >> [EPOLL] [PKCS11] built on Mar 10 2011 >> Mon Jun 6 05:39:11 2011 IMPORTANT: OpenVPN's default port number is now >> 1194, based on an official port number assignment by IANA. OpenVPN >> 2.0-beta16 and earlier used 5000 as the default port. >> Mon Jun 6 05:39:11 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' >> or higher to call user-defined scripts or executables >> Mon Jun 6 05:39:11 2011 ******* WARNING *******: all encryption and >> authentication features disabled -- all data will be tunnelled as cleartext >> Mon Jun 6 05:39:11 2011 TUN/TAP device tun0 opened >> Mon Jun 6 05:39:11 2011 UDPv4 link local (bound): [undef]:1194 >> Mon Jun 6 05:39:11 2011 UDPv4 link remote: [undef] >> / >> I also tried the suggestion of David to change do some trial and error of >> tun0 to tun1 or tun2. My new configuration is this; >> >> /port 1723 # (1194 is the default but on some APN networks this is >> blocked) >> proto tcp >> dev tun1 >> ca /etc/openvpn/keys/ca.crt >> cert /etc/openvpn/keys/server.crt >> key /etc/openvpn/keys/server.key >> dh /etc/openvpn/keys/dh1024.pem >> >> server 10.10.0.0 255.255.255.0 >> push "dhcp-option DNS 203.177.60.46 >> push "dhcp-option DNS 8.8.8.8" >> #push "dhcp-option WINS 192.168.1.2" >> push "route 192.168.0.0 255.255.255.0" >> ifconfig-pool-persist ipp.txt >> keepalive 10 120 >> comp-lzo >> user nobody >> group users >> persist-key >> persist-tun >> status openvpn-status.log >> verb 3 >> client-to-client >> duplicate-cn # (this means several users can use the same key)/ >> When I tried >> to start the Openvpn again it is still fail. And when I try to see the log >> message the message is this; >> >> /Mon Jun 6 06:15:01 2011 us=353761 /sbin/ip route add 10.10.0.0/24 < >> http://10.10.0.0/24> via 10.10.0.2 >> >> Mon Jun 6 06:15:01 2011 us=354807 Data Channel MTU parms [ L:1542 D:1450 >> EF:42 EB:135 ET:0 EL:0 AF:3/1 ] >> Mon Jun 6 06:15:01 2011 us=355825 GID set to nobody >> Mon Jun 6 06:15:01 2011 us=355939 UID set to nobody >> Mon Jun 6 06:15:01 2011 us=355998 UDPv4 link local (bound): [undef]:1723 >> Mon Jun 6 06:15:01 2011 us=356026 UDPv4 link remote: [undef] >> Mon Jun 6 06:15:01 2011 us=356048 MULTI: multi_init called, r=256 v=256 >> Mon Jun 6 06:15:01 2011 us=356158 IFCONFIG POOL: base=10.10.0.4 size=62 >> Mon Jun 6 06:15:01 2011 us=356209 IFCONFIG POOL LIST >> Mon Jun 6 06:15:01 2011 us=356288 Initialization Sequence Completed/ >> >> >> this looks perfectly alright! the server has started and has initialized > and is now waiting for clients to connect. > > I'd recommend to use > dev tun > instead of > dev tun1 > so OpenVPN can choose the first available tun device itself. > > HTH, > > JJK > > Hi, As what You have said it perfectly alright. But based of the command I implement as root. # /etc/init.d/openvpn start There is an error display and that is [Failed]. I wonder It return in the prompt failed error. Since when I see the logged is quiet fine. Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014. http://joselitotapangan.info http://jetzumy2k.wordpress.com http://jetzumy2k.byethost18.com http://onlinereference.wordpress.com |
|
From: Jan J. K. <ja...@ni...> - 2011-06-06 07:51:01
|
Joselito Tapangan wrote: > > /Mon Jun 6 06:15:01 2011 us=353761 /sbin/ip route add 10.10.0.0/24 <http://10.10.0.0/24> <http://10.10.0.0/24> via 10.10.0.2 > Mon Jun 6 06:15:01 2011 us=354807 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] > Mon Jun 6 06:15:01 2011 us=355825 GID set to nobody > Mon Jun 6 06:15:01 2011 us=355939 UID set to nobody > Mon Jun 6 06:15:01 2011 us=355998 UDPv4 link local (bound): [undef]:1723 > Mon Jun 6 06:15:01 2011 us=356026 UDPv4 link remote: [undef] > Mon Jun 6 06:15:01 2011 us=356048 MULTI: multi_init called, r=256 v=256 > Mon Jun 6 06:15:01 2011 us=356158 IFCONFIG POOL: base=10.10.0.4 size=62 > Mon Jun 6 06:15:01 2011 us=356209 IFCONFIG POOL LIST > Mon Jun 6 06:15:01 2011 us=356288 Initialization Sequence Completed/ > this looks perfectly alright! the server has started and has initialized and is now waiting for clients to connect. > I'd recommend to use > dev tun > instead of > dev tun1 > so OpenVPN can choose the first available tun device itself. > As what You have said it perfectly alright. But based of the command I implement as root. > # /etc/init.d/openvpn start > There is an error display and that is [Failed]. I wonder It return in the prompt failed error. Since when I see the logged is quiet fine. the CentOS /etc/init.d/openvpn startup script starts *ALL* files named /etc/openvpn/*.conf using openvpn --daemon --writepid /var/run/openvpn/$bn.pid --config $c --cd /etc/openvpn perhaps you have multiple .conf files in that directory? cheers, JJK |
|
From: Joselito T. <jos...@gm...> - 2011-06-08 00:06:57
|
On Mon, Jun 6, 2011 at 3:50 PM, Jan Just Keijser <ja...@ni...> wrote: > Joselito Tapangan wrote: > > > > > /Mon Jun 6 06:15:01 2011 us=353761 /sbin/ip route add > 10.10.0.0/24 <http://10.10.0.0/24> <http://10.10.0.0/24> > <http://10.10.0.0/24> <http://10.10.0.0/24> via 10.10.0.2 > > > > Mon Jun 6 06:15:01 2011 us=354807 Data Channel MTU parms [ > L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] > > Mon Jun 6 06:15:01 2011 us=355825 GID set to nobody > > Mon Jun 6 06:15:01 2011 us=355939 UID set to nobody > > Mon Jun 6 06:15:01 2011 us=355998 UDPv4 link local (bound): > [undef]:1723 > > Mon Jun 6 06:15:01 2011 us=356026 UDPv4 link remote: [undef] > > Mon Jun 6 06:15:01 2011 us=356048 MULTI: multi_init called, > r=256 v=256 > > Mon Jun 6 06:15:01 2011 us=356158 IFCONFIG POOL: base=10.10.0.4 > size=62 > > Mon Jun 6 06:15:01 2011 us=356209 IFCONFIG POOL LIST > > Mon Jun 6 06:15:01 2011 us=356288 Initialization Sequence > Completed/ > > > > this looks perfectly alright! the server has started and has > initialized and is now waiting for clients to connect. > > > I'd recommend to use > > dev tun > > instead of > > dev tun1 > > so OpenVPN can choose the first available tun device itself. > > > > As what You have said it perfectly alright. But based of the command I > implement as root. > > > # /etc/init.d/openvpn start > > > There is an error display and that is [Failed]. I wonder It return in the > prompt failed error. Since when I see the logged is quiet fine. > > the CentOS /etc/init.d/openvpn startup script starts *ALL* files named > /etc/openvpn/*.conf using > > openvpn --daemon --writepid /var/run/openvpn/$bn.pid --config $c --cd > /etc/openvpn > > perhaps you have multiple .conf files in that directory? > > cheers, > > JJK > > Yes, there are 2 conf files found in the directory /etc/openvpn/ the following files are openvpn.conf, and server.conf Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014. http://joselitotapangan.info http://jetzumy2k.wordpress.com http://jetzumy2k.byethost18.com http://onlinereference.wordpress.com |
|
From: Jan J. K. <ja...@ni...> - 2011-06-08 06:12:54
|
Joselito Tapangan wrote: > > On Mon, Jun 6, 2011 at 3:50 PM, Jan Just Keijser <ja...@ni... > <mailto:ja...@ni...>> wrote: > > Joselito Tapangan wrote: > > > > > /Mon Jun 6 06:15:01 2011 us=353761 /sbin/ip route add > 10.10.0.0/24 <http://10.10.0.0/24> <http://10.10.0.0/24> > <http://10.10.0.0/24> via 10.10.0.2 > > > > Mon Jun 6 06:15:01 2011 us=354807 Data Channel MTU parms > [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] > > Mon Jun 6 06:15:01 2011 us=355825 GID set to nobody > > Mon Jun 6 06:15:01 2011 us=355939 UID set to nobody > > Mon Jun 6 06:15:01 2011 us=355998 UDPv4 link local > (bound): [undef]:1723 > > Mon Jun 6 06:15:01 2011 us=356026 UDPv4 link remote: [undef] > > Mon Jun 6 06:15:01 2011 us=356048 MULTI: multi_init > called, r=256 v=256 > > Mon Jun 6 06:15:01 2011 us=356158 IFCONFIG POOL: > base=10.10.0.4 size=62 > > Mon Jun 6 06:15:01 2011 us=356209 IFCONFIG POOL LIST > > Mon Jun 6 06:15:01 2011 us=356288 Initialization > Sequence Completed/ > > > > this looks perfectly alright! the server has started and has > initialized and is now waiting for clients to connect. > > > I'd recommend to use > > dev tun > > instead of > > dev tun1 > > so OpenVPN can choose the first available tun device itself. > > > > As what You have said it perfectly alright. But based of the > command I implement as root. > > > # /etc/init.d/openvpn start > > > There is an error display and that is [Failed]. I wonder It > return in the prompt failed error. Since when I see the logged is > quiet fine. > > the CentOS /etc/init.d/openvpn startup script starts *ALL* files > named /etc/openvpn/*.conf using > > openvpn --daemon --writepid /var/run/openvpn/$bn.pid --config > $c --cd /etc/openvpn > > perhaps you have multiple .conf files in that directory? > > cheers, > > JJK > > Yes, there are 2 conf files found in the directory /etc/openvpn/ the > following files are openvpn.conf, and server.conf > > the /etc/init.d/openvpn startup script will try to start openvpn using both config files - if either one produces an error the message '[FAILED]' is printed. Try renaming the one you *don't* use to ....conf.DISABLE and rerun /etc/init.d/openvpn start HTH, JJK |
|
From: David S. <ope...@to...> - 2011-05-31 11:29:35
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 31/05/11 08:12, Joselito Tapangan wrote: > Hi, > > I would like to consult regarding this issue of OpenVPN I installed using > CentOS. I followed this link in setting up OpenVPN > http://www.howtoforge.com/openvpn-server-on-centos-5.2. I completely > followed the instructions. However there is an issue after installing the > OpenVPN. When I tried to start OpenVPN using this command with a root access. > Just a little extra advice in addition to what Jan Just says. CentOS/RHEL/SL ships by default with an older OpenVPN client. I'd recommend you to install the Fedora EPEL repository and install this version. That gives you at least one of the latest 2.1 releases. <http://fedoraproject.org/wiki/EPEL/FAQ#How_can_I_install_the_packages_from_the_EPEL_software_repository.3F> kind regards, David Sommerseth -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk3k0Q8ACgkQDC186MBRfrotkgCffDJAeDVLRc8vwjdmCejEyI+K 0mIAoIxowtWyobjxsyIj8rBFc/AoJr7G =L06+ -----END PGP SIGNATURE----- |