Jump to content
Как правильно добавить self-test и прочую отладку в тему
Официальное хранилище ПО в виде файлов

Вопросы по интеграции OpenVPN в NDMS

KorDen
 Share

Recommended Posts

IgaX Honored Flooder

IgaX

Posted
Posted
1 час назад, Сергей Молоков сказал:

может все-таки мне не хватает какой-нибудь компоненты

м.б. видит --dh для серверной стороны only.

Link to comment
Share on other sites
  • Replies 762
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

Le ecureuil
Le ecureuil

Небольшие новости. По результатам моих тестов выяснилась такая картина :   7621 7513 7628 NONE 68

Le ecureuil
Le ecureuil

Я уже пробовал dco в январе 2021, и на тот момент там было очень "сыро" + в ветке ovpn 2.x не было поддержки, я ее приделал сам, но все равно там далеко от того, что можно показать пользователям было.

Le ecureuil
Le ecureuil

Окольным путем это возможно: - создаете профиль доступа, где есть только openvpn как wan, а остальных нет - туда добавляете нужные устройства В профилях доступа используются только dns, полу

Posted Images

pachalia Content Generator

pachalia

Posted
Posted

Если в конфигурационном файле  дан только "Ca CERTIFICATE" и сказано что надо потом указать логин и пароль. Как на основе логина и пароля получить недостающие Cert и Private key? Вот ссылка на такой OpenVPN.

Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
5 минут назад, pachalia сказал:

Если в конфигурационном файле  дан только "Ca CERTIFICATE" и сказано что надо потом указать логин и пароль. Как на основе логина и пароля получить недостающие Cert и Private key? Вот ссылка на такой OpenVPN.

Нужно в конфиге будет заменить строку
  

auth-user-pass sipnet.credentials

на блок 

<auth-user-pass>
SIP_ID@sipnet.ru
пароль
</auth-user-pass>

Больше никаких cert и private key не нужно.

Link to comment
Share on other sites
pachalia Content Generator

pachalia

Posted
Posted
11 час назад, Le ecureuil сказал:

на блок 


<auth-user-pass>
SIP_ID@sipnet.ru
пароль
</auth-user-pass>

Сообщение в журнале: Unrecognized option or missing or extra parameter(s) in configuration: (line 12): auth-user-pass (2.4.2)

Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
2 часа назад, pachalia сказал:

Сообщение в журнале: Unrecognized option or missing or extra parameter(s) in configuration: (line 12): auth-user-pass (2.4.2)

Погодите еще, это можно будет пробовать только в пятничной сборке.

Link to comment
Share on other sites
T@rkus Honored Flooder

T@rkus

Posted
Posted (edited)
В 10.06.2017 в 19:31, T@rkus сказал:

Без 4к. Но соединение поднялось с ошибками.

 

  Показать содержимое

 

client

dev tun1

proto udp

remote 5.45.80.25 53

resolv-retry infinite

redirect-gateway def1

nobind

tun-mtu 1500

tun-mtu-extra 32

ca ca.crt

cert user.crt

key user.key

cipher AES-256-CBC

ns-cert-type server

persist-key

persist-tun

verb 3

explicit-exit-notify

route-method  exe

route-delay 3

route-metric 512 

ping 45

ping-restart 225
 

 

  Показать содержимое

 

  Показать содержимое

Jun 10 19:28:03

OpenVPN0

OpenVPN 2.4.2 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD]
Jun 10 19:28:03OpenVPN0
library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.10
Jun 10 19:28:03OpenVPN0
WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Jun 10 19:28:03OpenVPN0
TCP/UDP: Preserving recently used remote address: [AF_INET]5.45.80.25:53
Jun 10 19:28:03OpenVPN0
Socket Buffers: R=[155648->155648] S=[155648->155648]
Jun 10 19:28:03OpenVPN0
UDP link local: (not bound)
Jun 10 19:28:03OpenVPN0
UDP link remote: [AF_INET]5.45.80.25:53
Jun 10 19:28:03OpenVPN0
NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Jun 10 19:28:03OpenVPN0
TLS: Initial packet from [AF_INET]5.45.80.25:53, sid=173d0de3 d3e9f67f
Jun 10 19:28:03OpenVPN0
VERIFY OK: depth=1, C=RU, ST=RU-LEN, L=Saint Petersburg, O=ShadeYou.com, CN=ShadeYou.com CA, emailAddress=support@shadeyou.com
Jun 10 19:28:03OpenVPN0
VERIFY OK: nsCertType=SERVER
Jun 10 19:28:03OpenVPN0
VERIFY OK: depth=0, C=RU, ST=RU-LEN, L=Saint Petersburg, O=ShadeYou.com, CN=shadeyou.com, emailAddress=support@shadeyou.com
Jun 10 19:28:03OpenVPN0
Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Jun 10 19:28:03OpenVPN0
[shadeyou.com] Peer Connection Initiated with [AF_INET]5.45.80.25:53
Jun 10 19:28:04ndm
Network::Interface::OpenVpn: "OpenVPN0": added host route to remote endpoint 5.45.80.25 via PPTP2.
Jun 10 19:28:04ndm
Core::ConfigurationSaver: configuration saved.
Jun 10 19:28:05OpenVPN0
SENT CONTROL [shadeyou.com]: 'PUSH_REQUEST' (status=1)
Jun 10 19:28:05OpenVPN0
PUSH: Received control message: 'PUSH_REPLY,route 10.202.0.0 255.255.0.0,redirect-gateway def1,dhcp-option DNS 10.202.0.1,route 10.202.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.202.0.22 10.202.0.21'
Jun 10 19:28:05OpenVPN0
OPTIONS IMPORT: timers and/or timeouts modified
Jun 10 19:28:05OpenVPN0
OPTIONS IMPORT: --ifconfig/up options modified
Jun 10 19:28:05OpenVPN0
OPTIONS IMPORT: route options modified
Jun 10 19:28:05OpenVPN0
OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Jun 10 19:28:05OpenVPN0
Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Jun 10 19:28:05OpenVPN0
Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 10 19:28:05OpenVPN0
Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Jun 10 19:28:05OpenVPN0
Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun 10 19:28:05OpenVPN0
TUN/TAP device tun1 opened
Jun 10 19:28:05OpenVPN0
TUN/TAP TX queue length set to 100
Jun 10 19:28:05OpenVPN0
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Jun 10 19:28:05ndm
Network::Interface::IP: "OpenVPN0": IP address is 10.202.0.22/32.
Jun 10 19:28:05ndm
Network::Interface::OpenVpn: "OpenVPN0": TUN peer address is 10.202.0.21.
Jun 10 19:28:05ndm
Network::Interface::OpenVpn: "OpenVPN0": added host route to peer 10.202.0.21 via 10.202.0.22.
Jun 10 19:28:07ndm
Network::Interface::IP: "PPTP2": global priority is 990.
Jun 10 19:28:07ndm
Network::Interface::IP: "OpenVPN0": global priority is 1000.
Jun 10 19:28:07ndm
Core::ConfigurationSaver: saving configuration...
Jun 10 19:28:09ndm
Network::RoutingTable: gateway 10.202.0.21 is unreachable via OpenVPN0.
Jun 10 19:28:09ndm
Network::Interface::OpenVpn: "OpenVPN0": system failed [0xcffd053c].
Jun 10 19:28:10ndm
Network::RoutingTable: gateway 10.202.0.21 is unreachable via OpenVPN0.
Jun 10 19:28:10ndm
Network::Interface::OpenVpn: "OpenVPN0": system failed [0xcffd05b2].
Jun 10 19:28:10ndm
Network::RoutingTable: gateway 10.202.0.21 is unreachable via OpenVPN0.
Jun 10 19:28:10ndm
Network::Interface::OpenVpn: "OpenVPN0": system failed [0xcffd05b2].
Jun 10 19:28:10OpenVPN0
GID set to nobody
Jun 10 19:28:10OpenVPN0
UID set to nobody
Jun 10 19:28:10OpenVPN0
Initialization Sequence Completed
Jun 10 19:28:11ndm
Core::ConfigurationSaver: configuration saved.
 

 

Giga 2.10.A.3.0-0

Соединение поднялось. Ошибок в логе не наблюдаю.  Правда вот скорость всего.

2017-06-24_111457.png.e0324a0b670a96a492ad9c457d60be08.png

Процессор при тесте скорости загружался где-то на 50-60%.

@Le ecureuil Скорость выше уже не будет на Giga II?

 

 

 

Edited by T@rkus
  • Thanks 1
Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
50 минут назад, T@rkus сказал:

Giga 2.10.A.3.0-0

Соединение поднялось. Ошибок в логе не наблюдаю.  Правда вот скорость всего.

2017-06-24_111457.png.e0324a0b670a96a492ad9c457d60be08.png

Процессор при тесте скорости загружался где-то на 50-60%.

@Le ecureuil Скорость выше уже не будет на Giga II?

 

 

 

Да, скорее всего это предел. 50% из-за того, что OpenVPN однопоточный и нагружает всего одно ядро.

  • Thanks 1
Link to comment
Share on other sites
T@rkus Honored Flooder

T@rkus

Posted
Posted
1 минуту назад, Le ecureuil сказал:

Да, скорее всего это предел. 50% из-за того, что OpenVPN однопоточный и нагружает всего одно ядро.

А на Ultra II как со скоростью дела обстоять будут?

Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
47 минут назад, T@rkus сказал:

А на Ultra II как со скоростью дела обстоять будут?

У меня в лабораторных условиях выходило 35 Мбит/сек для AES-128-CBC.

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted
В 25.06.2017 в 15:45, Le ecureuil сказал:

Неужели у всех все заработало? :)

У меня не заработало, повторюсь, чтобы вам не листать выше,

конфиг: 

client
proto udp
remote 10.2.9.84 1194
dev tun
nobind
comp-lzo
#ns-cert-type server
tls-client

<tls-auth>
.........
</tls-auth>
<dh>
.........
</dh>
<pkcs12>
.........
</pkcs12>

лог: 

Jun 28 10:53:39 OpenVPN0 OpenVPN 2.4.3 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD]
Jun 28 10:53:39 OpenVPN0 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.10
Jun 28 10:53:39 ndm      Service: "OpenVPN": unexpectedly stopped.

На сервере в логе нет попыток подключения.

self-test.txt

Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
4 часа назад, Сергей Молоков сказал:

У меня не заработало, повторюсь, чтобы вам не листать выше,

конфиг: 


client
proto udp
remote 10.2.9.84 1194
dev tun
nobind
comp-lzo
#ns-cert-type server
tls-client

<tls-auth>
.........
</tls-auth>
<dh>
.........
</dh>
<pkcs12>
.........
</pkcs12>

лог: 


Jun 28 10:53:39 OpenVPN0 OpenVPN 2.4.3 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD]
Jun 28 10:53:39 OpenVPN0 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.10
Jun 28 10:53:39 ndm      Service: "OpenVPN": unexpectedly stopped.

На сервере в логе нет попыток подключения.

self-test.txt

С pkcs12 нажно воспроизводить 1-в-1, пришлите инструкцию по созданию ключей и конфига на сервере.

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted
17 часов назад, Le ecureuil сказал:

пришлите инструкцию по созданию ключей и конфига на сервере.

конфиг сервера, батник для генерации ключей и батник который запускает генерацию, передавая имя клиента.

в таком варианте на сегодня работают клиенты под виндой и кинетик + ентваре.

ovpn.7z

  • Thanks 1
Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
17 часов назад, Сергей Молоков сказал:

конфиг сервера, батник для генерации ключей и батник который запускает генерацию, передавая имя клиента.

в таком варианте на сегодня работают клиенты под виндой и кинетик + ентваре.

ovpn.7z

Поправлено, появится в следующей сборке.

Поддерживаются только pkcs12 контейнеры либо незашифрованные, либо с пустым паролем, либо с паролем "password". Другие пароли не поддерживаются, и неизвестно будут ли.

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted
В 30.06.2017 в 02:46, Le ecureuil сказал:

Поправлено, появится в следующей сборке.

Здравствуйте!

Обновился, на сегодня лог такой: 

Jul 04 09:33:35 OpenVPN0 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Jul 04 09:33:35 OpenVPN0 TCP/UDP: Preserving recently used remote address: [AF_INET]10.2.9.84:1194
Jul 04 09:33:35 OpenVPN0 UDP link local (bound): [AF_INET][undef]:1194
Jul 04 09:33:35 OpenVPN0 UDP link remote: [AF_INET]10.2.9.84:1194
Jul 04 09:34:35 OpenVPN0 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 04 09:34:35 OpenVPN0 TLS Error: TLS handshake failed
Jul 04 09:34:35 OpenVPN0 SIGUSR1[soft,tls-error] received, process restarting

лог сервера: 

Tue Jul 04 09:33:35 2017 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194
Tue Jul 04 09:33:38 2017 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jul 04 09:33:38 2017 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194
Tue Jul 04 09:33:42 2017 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jul 04 09:33:42 2017 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194

что я делаю не так?

Спасибо.

Link to comment
Share on other sites
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
5 часов назад, Сергей Молоков сказал:

Здравствуйте!

Обновился, на сегодня лог такой: 


Jul 04 09:33:35 OpenVPN0 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Jul 04 09:33:35 OpenVPN0 TCP/UDP: Preserving recently used remote address: [AF_INET]10.2.9.84:1194
Jul 04 09:33:35 OpenVPN0 UDP link local (bound): [AF_INET][undef]:1194
Jul 04 09:33:35 OpenVPN0 UDP link remote: [AF_INET]10.2.9.84:1194
Jul 04 09:34:35 OpenVPN0 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 04 09:34:35 OpenVPN0 TLS Error: TLS handshake failed
Jul 04 09:34:35 OpenVPN0 SIGUSR1[soft,tls-error] received, process restarting

лог сервера: 


Tue Jul 04 09:33:35 2017 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194
Tue Jul 04 09:33:38 2017 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jul 04 09:33:38 2017 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194
Tue Jul 04 09:33:42 2017 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jul 04 09:33:42 2017 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194

что я делаю не так?

Спасибо.

Неплохо бы включить verb 5 в обоих случаях (на клиенте и на сервере) и выдать сюда полный лог с обоих. Похоже на MITM или на отсутствующий ciphersuite.

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted (edited)
В 04.07.2017 в 15:24, Le ecureuil сказал:

Неплохо бы включить verb 5 в обоих случаях (на клиенте и на сервере) и выдать сюда полный лог с обоих. Похоже на MITM или на отсутствующий ciphersuite.

сервер: 

Tue Jul 11 10:41:05 2017 us=989149 Current Parameter Settings:
Tue Jul 11 10:41:05 2017 us=989149   config = 'c:\openvpn\config\servervpn.ovpn'
Tue Jul 11 10:41:05 2017 us=989149   mode = 1
Tue Jul 11 10:41:05 2017 us=989149   show_ciphers = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   show_digests = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   show_engines = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   genkey = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   key_pass_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   show_tls_ciphers = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   connect_retry_max = 0
Tue Jul 11 10:41:05 2017 us=989149 Connection profiles [0]:
Tue Jul 11 10:41:05 2017 us=989149   proto = udp4
Tue Jul 11 10:41:05 2017 us=989149   local = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   local_port = '1194'
Tue Jul 11 10:41:05 2017 us=989149   remote = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   remote_port = '1194'
Tue Jul 11 10:41:05 2017 us=989149   remote_float = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   bind_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   bind_local = ENABLED
Tue Jul 11 10:41:05 2017 us=989149   bind_ipv6_only = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   connect_retry_seconds = 5
Tue Jul 11 10:41:05 2017 us=989149   connect_timeout = 120
Tue Jul 11 10:41:05 2017 us=989149   socks_proxy_server = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   socks_proxy_port = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   tun_mtu = 1500
Tue Jul 11 10:41:05 2017 us=989149   tun_mtu_defined = ENABLED
Tue Jul 11 10:41:05 2017 us=989149   link_mtu = 1500
Tue Jul 11 10:41:05 2017 us=989149   link_mtu_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   tun_mtu_extra = 0
Tue Jul 11 10:41:05 2017 us=989149   tun_mtu_extra_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   mtu_discover_type = -1
Tue Jul 11 10:41:05 2017 us=989149   fragment = 0
Tue Jul 11 10:41:05 2017 us=989149   mssfix = 1450
Tue Jul 11 10:41:05 2017 us=989149   explicit_exit_notification = 0
Tue Jul 11 10:41:05 2017 us=989149 Connection profiles END
Tue Jul 11 10:41:05 2017 us=989149   remote_random = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   ipchange = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   dev = 'tun'
Tue Jul 11 10:41:05 2017 us=989149   dev_type = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   dev_node = 'OpenVPN'
Tue Jul 11 10:41:05 2017 us=989149   lladdr = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   topology = 3
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_local = '192.168.0.1'
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_remote_netmask = '255.255.255.0'
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_noexec = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_nowarn = DISABLED
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_ipv6_local = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_ipv6_netbits = 0
Tue Jul 11 10:41:05 2017 us=989149   ifconfig_ipv6_remote = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=989149   shaper = 0
Tue Jul 11 10:41:05 2017 us=990150   mtu_test = 0
Tue Jul 11 10:41:05 2017 us=990150   mlock = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   keepalive_ping = 10
Tue Jul 11 10:41:05 2017 us=990150   keepalive_timeout = 120
Tue Jul 11 10:41:05 2017 us=990150   inactivity_timeout = 0
Tue Jul 11 10:41:05 2017 us=990150   ping_send_timeout = 10
Tue Jul 11 10:41:05 2017 us=990150   ping_rec_timeout = 240
Tue Jul 11 10:41:05 2017 us=990150   ping_rec_timeout_action = 2
Tue Jul 11 10:41:05 2017 us=990150   ping_timer_remote = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   remap_sigusr1 = 0
Tue Jul 11 10:41:05 2017 us=990150   persist_tun = ENABLED
Tue Jul 11 10:41:05 2017 us=990150   persist_local_ip = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   persist_remote_ip = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   persist_key = ENABLED
Tue Jul 11 10:41:05 2017 us=990150   passtos = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   resolve_retry_seconds = 1000000000
Tue Jul 11 10:41:05 2017 us=990150   resolve_in_advance = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   username = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   groupname = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   chroot_dir = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   cd_dir = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   writepid = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   up_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   down_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   down_pre = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   up_restart = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   up_delay = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   daemon = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   inetd = 0
Tue Jul 11 10:41:05 2017 us=990150   log = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   suppress_timestamps = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   machine_readable_output = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   nice = 0
Tue Jul 11 10:41:05 2017 us=990150   verbosity = 5
Tue Jul 11 10:41:05 2017 us=990150   mute = 0
Tue Jul 11 10:41:05 2017 us=990150   gremlin = 0
Tue Jul 11 10:41:05 2017 us=990150   status_file = 'c:/openvpn/log/status.log'
Tue Jul 11 10:41:05 2017 us=990150   status_file_version = 1
Tue Jul 11 10:41:05 2017 us=990150   status_file_update_freq = 60
Tue Jul 11 10:41:05 2017 us=990150   occ = ENABLED
Tue Jul 11 10:41:05 2017 us=990150   rcvbuf = 0
Tue Jul 11 10:41:05 2017 us=990150   sndbuf = 0
Tue Jul 11 10:41:05 2017 us=990150   sockflags = 0
Tue Jul 11 10:41:05 2017 us=990150   fast_io = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   comp.alg = 2
Tue Jul 11 10:41:05 2017 us=990150   comp.flags = 1
Tue Jul 11 10:41:05 2017 us=990150   route_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   route_default_gateway = '192.168.0.2'
Tue Jul 11 10:41:05 2017 us=990150   route_default_metric = 0
Tue Jul 11 10:41:05 2017 us=990150   route_noexec = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   route_delay = 5
Tue Jul 11 10:41:05 2017 us=990150   route_delay_window = 30
Tue Jul 11 10:41:05 2017 us=990150   route_delay_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   route_nopull = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   route_gateway_via_dhcp = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   allow_pull_fqdn = DISABLED
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.229.0/255.255.255.0/192.168.0.29/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.228.0/255.255.255.0/192.168.0.28/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.227.0/255.255.255.0/192.168.0.27/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.226.0/255.255.255.0/192.168.0.26/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.225.0/255.255.255.0/192.168.0.25/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.224.0/255.255.255.0/192.168.0.24/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.223.0/255.255.255.0/192.168.0.23/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.222.0/255.255.255.0/192.168.0.22/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.221.0/255.255.255.0/192.168.0.21/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.220.0/255.255.255.0/192.168.0.20/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.219.0/255.255.255.0/192.168.0.19/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.218.0/255.255.255.0/192.168.0.18/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.217.0/255.255.255.0/192.168.0.17/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.216.0/255.255.255.0/192.168.0.16/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.215.0/255.255.255.0/192.168.0.15/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.214.0/255.255.255.0/192.168.0.14/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.213.0/255.255.255.0/192.168.0.13/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.212.0/255.255.255.0/192.168.0.12/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.211.0/255.255.255.0/192.168.0.11/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.210.0/255.255.255.0/192.168.0.10/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.208.0/255.255.255.0/192.168.0.8/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.207.0/255.255.255.0/192.168.0.7/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.206.0/255.255.255.0/192.168.0.6/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.205.0/255.255.255.0/192.168.0.5/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.204.0/255.255.255.0/192.168.0.4/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.203.0/255.255.255.0/192.168.0.3/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   route 192.168.202.0/255.255.255.0/192.168.0.2/default (not set)
Tue Jul 11 10:41:05 2017 us=990150   management_addr = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   management_port = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   management_user_pass = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=990150   management_log_history_cache = 250
Tue Jul 11 10:41:05 2017 us=990150   management_echo_buffer_size = 100
Tue Jul 11 10:41:05 2017 us=991150   management_write_peer_info_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   management_client_user = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   management_client_group = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   management_flags = 0
Tue Jul 11 10:41:05 2017 us=991150   shared_secret_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   key_direction = 1
Tue Jul 11 10:41:05 2017 us=991150   ciphername = 'BF-CBC'
Tue Jul 11 10:41:05 2017 us=991150   ncp_enabled = ENABLED
Tue Jul 11 10:41:05 2017 us=991150   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Jul 11 10:41:05 2017 us=991150   authname = 'SHA1'
Tue Jul 11 10:41:05 2017 us=991150   prng_hash = 'SHA1'
Tue Jul 11 10:41:05 2017 us=991150   prng_nonce_secret_len = 16
Tue Jul 11 10:41:05 2017 us=991150   keysize = 0
Tue Jul 11 10:41:05 2017 us=991150   engine = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   replay = ENABLED
Tue Jul 11 10:41:05 2017 us=991150   mute_replay_warnings = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   replay_window = 64
Tue Jul 11 10:41:05 2017 us=991150   replay_time = 15
Tue Jul 11 10:41:05 2017 us=991150   packet_id_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   use_iv = ENABLED
Tue Jul 11 10:41:05 2017 us=991150   test_crypto = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   tls_server = ENABLED
Tue Jul 11 10:41:05 2017 us=991150   tls_client = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   key_method = 2
Tue Jul 11 10:41:05 2017 us=991150   ca_file = 'c:/openvpn/config/keys/ca.crt'
Tue Jul 11 10:41:05 2017 us=991150   ca_path = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   dh_file = 'c:/openvpn/config/keys/dh1024.pem'
Tue Jul 11 10:41:05 2017 us=991150   cert_file = 'c:/openvpn/config/keys/servervpn.crt'
Tue Jul 11 10:41:05 2017 us=991150   extra_certs_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   priv_key_file = 'c:/openvpn/config/keys/servervpn.key'
Tue Jul 11 10:41:05 2017 us=991150   pkcs12_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   cryptoapi_cert = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   cipher_list = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   tls_verify = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   tls_export_cert = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   verify_x509_type = 0
Tue Jul 11 10:41:05 2017 us=991150   verify_x509_name = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   crl_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   ns_cert_type = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_ku[i] = 0
Tue Jul 11 10:41:05 2017 us=991150   remote_cert_eku = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   ssl_flags = 0
Tue Jul 11 10:41:05 2017 us=991150   tls_timeout = 120
Tue Jul 11 10:41:05 2017 us=991150   renegotiate_bytes = -1
Tue Jul 11 10:41:05 2017 us=991150   renegotiate_packets = 0
Tue Jul 11 10:41:05 2017 us=991150   renegotiate_seconds = 3600
Tue Jul 11 10:41:05 2017 us=991150   handshake_window = 60
Tue Jul 11 10:41:05 2017 us=991150   transition_window = 3600
Tue Jul 11 10:41:05 2017 us=991150   single_session = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   push_peer_info = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   tls_exit = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   tls_auth_file = 'c:/openvpn/config/keys/ta.key'
Tue Jul 11 10:41:05 2017 us=991150   tls_crypt_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_protected_authentication = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_private_mode = 00000000
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=991150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_cert_private = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_pin_cache_period = -1
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_id = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   pkcs11_id_management = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   server_network = 192.168.0.0
Tue Jul 11 10:41:05 2017 us=992150   server_netmask = 255.255.255.0
Tue Jul 11 10:41:05 2017 us=992150   server_network_ipv6 = ::
Tue Jul 11 10:41:05 2017 us=992150   server_netbits_ipv6 = 0
Tue Jul 11 10:41:05 2017 us=992150   server_bridge_ip = 0.0.0.0
Tue Jul 11 10:41:05 2017 us=992150   server_bridge_netmask = 0.0.0.0
Tue Jul 11 10:41:05 2017 us=992150   server_bridge_pool_start = 0.0.0.0
Tue Jul 11 10:41:05 2017 us=992150   server_bridge_pool_end = 0.0.0.0
Tue Jul 11 10:41:05 2017 us=992150   push_entry = 'route-gateway 192.168.0.1'
Tue Jul 11 10:41:05 2017 us=992150   push_entry = 'topology subnet'
Tue Jul 11 10:41:05 2017 us=992150   push_entry = 'ping 10'
Tue Jul 11 10:41:05 2017 us=992150   push_entry = 'ping-restart 120'
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_pool_defined = ENABLED
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_pool_start = 192.168.0.2
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_pool_end = 192.168.0.253
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_pool_netmask = 255.255.255.0
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_pool_persist_filename = 'c:/openvpn/config/ccd/ipp.txt'
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_pool_persist_refresh_freq = 0
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_ipv6_pool_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_ipv6_pool_base = ::
Tue Jul 11 10:41:05 2017 us=992150   ifconfig_ipv6_pool_netbits = 0
Tue Jul 11 10:41:05 2017 us=992150   n_bcast_buf = 256
Tue Jul 11 10:41:05 2017 us=992150   tcp_queue_limit = 64
Tue Jul 11 10:41:05 2017 us=992150   real_hash_size = 256
Tue Jul 11 10:41:05 2017 us=992150   virtual_hash_size = 256
Tue Jul 11 10:41:05 2017 us=992150   client_connect_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   learn_address_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   client_disconnect_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   client_config_dir = 'c:/openvpn/config/ccd'
Tue Jul 11 10:41:05 2017 us=992150   ccd_exclusive = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   tmp_dir = 'C:\Windows\TEMP\'
Tue Jul 11 10:41:05 2017 us=992150   push_ifconfig_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   push_ifconfig_local = 0.0.0.0
Tue Jul 11 10:41:05 2017 us=992150   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jul 11 10:41:05 2017 us=992150   push_ifconfig_ipv6_defined = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   push_ifconfig_ipv6_local = ::/0
Tue Jul 11 10:41:05 2017 us=992150   push_ifconfig_ipv6_remote = ::
Tue Jul 11 10:41:05 2017 us=992150   enable_c2c = ENABLED
Tue Jul 11 10:41:05 2017 us=992150   duplicate_cn = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   cf_max = 0
Tue Jul 11 10:41:05 2017 us=992150   cf_per = 0
Tue Jul 11 10:41:05 2017 us=992150   max_clients = 1024
Tue Jul 11 10:41:05 2017 us=992150   max_routes_per_client = 256
Tue Jul 11 10:41:05 2017 us=992150   auth_user_pass_verify_script = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   auth_user_pass_verify_script_via_file = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   auth_token_generate = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   auth_token_lifetime = 0
Tue Jul 11 10:41:05 2017 us=992150   client = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   pull = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   auth_user_pass_file = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   show_net_up = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   route_method = 2
Tue Jul 11 10:41:05 2017 us=992150   block_outside_dns = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   ip_win32_defined = ENABLED
Tue Jul 11 10:41:05 2017 us=992150   ip_win32_type = 0
Tue Jul 11 10:41:05 2017 us=992150   dhcp_masq_offset = 0
Tue Jul 11 10:41:05 2017 us=992150   dhcp_lease_time = 31536000
Tue Jul 11 10:41:05 2017 us=992150   tap_sleep = 5
Tue Jul 11 10:41:05 2017 us=992150   dhcp_options = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   dhcp_renew = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   dhcp_pre_release = DISABLED
Tue Jul 11 10:41:05 2017 us=992150   domain = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   netbios_scope = '[UNDEF]'
Tue Jul 11 10:41:05 2017 us=992150   netbios_node_type = 0
Tue Jul 11 10:41:05 2017 us=992150   disable_nbt = DISABLED
Tue Jul 11 10:41:05 2017 us=992150 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 20 2017
Tue Jul 11 10:41:05 2017 us=992150 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Jul 11 10:41:05 2017 us=992150 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Tue Jul 11 10:41:06 2017 us=144159 Diffie-Hellman initialized with 1024 bit key
Tue Jul 11 10:41:06 2017 us=145158 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 11 10:41:06 2017 us=145158 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 11 10:41:06 2017 us=145158 TLS-Auth MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jul 11 10:41:06 2017 us=145158 interactive service msg_channel=0
Tue Jul 11 10:41:06 2017 us=146159 ROUTE_GATEWAY 192.168.5.1/255.255.255.0 I=13 HWADDR=00:17:9a:b2:f9:ba
Tue Jul 11 10:41:06 2017 us=147158 open_tun
Tue Jul 11 10:41:06 2017 us=148159 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{A3C5D0FC-40E0-4FC6-AD40-1B9625276F2E}.tap
Tue Jul 11 10:41:06 2017 us=148159 TAP-Windows Driver Version 9.21 
Tue Jul 11 10:41:06 2017 us=148159 TAP-Windows MTU=1500
Tue Jul 11 10:41:06 2017 us=148159 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.0.0/192.168.0.1/255.255.255.0 [SUCCEEDED]
Tue Jul 11 10:41:06 2017 us=148159 Sleeping for 5 seconds...
Tue Jul 11 10:41:11 2017 us=149451 Successful ARP Flush on interface [19] {A3C5D0FC-40E0-4FC6-AD40-1B9625276F2E}
Tue Jul 11 10:41:11 2017 us=149451 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Jul 11 10:41:11 2017 us=149451 ******** NOTE:  Please manually set the IP/netmask of 'OpenVPN' to 192.168.0.1/255.255.255.0 (if it is not already set)
Tue Jul 11 10:41:11 2017 us=149451 C:\Windows\system32\route.exe ADD 192.168.202.0 MASK 255.255.255.0 192.168.0.2
Tue Jul 11 10:41:11 2017 us=163452 C:\Windows\system32\route.exe ADD 192.168.203.0 MASK 255.255.255.0 192.168.0.3
Tue Jul 11 10:41:11 2017 us=177452 C:\Windows\system32\route.exe ADD 192.168.204.0 MASK 255.255.255.0 192.168.0.4
Tue Jul 11 10:41:11 2017 us=190454 C:\Windows\system32\route.exe ADD 192.168.205.0 MASK 255.255.255.0 192.168.0.5
Tue Jul 11 10:41:11 2017 us=204455 C:\Windows\system32\route.exe ADD 192.168.206.0 MASK 255.255.255.0 192.168.0.6
Tue Jul 11 10:41:11 2017 us=217455 C:\Windows\system32\route.exe ADD 192.168.207.0 MASK 255.255.255.0 192.168.0.7
Tue Jul 11 10:41:11 2017 us=231456 C:\Windows\system32\route.exe ADD 192.168.208.0 MASK 255.255.255.0 192.168.0.8
Tue Jul 11 10:41:11 2017 us=245456 C:\Windows\system32\route.exe ADD 192.168.210.0 MASK 255.255.255.0 192.168.0.10
Tue Jul 11 10:41:11 2017 us=258458 C:\Windows\system32\route.exe ADD 192.168.211.0 MASK 255.255.255.0 192.168.0.11
Tue Jul 11 10:41:11 2017 us=272458 C:\Windows\system32\route.exe ADD 192.168.212.0 MASK 255.255.255.0 192.168.0.12
Tue Jul 11 10:41:11 2017 us=287459 C:\Windows\system32\route.exe ADD 192.168.213.0 MASK 255.255.255.0 192.168.0.13
Tue Jul 11 10:41:11 2017 us=301459 C:\Windows\system32\route.exe ADD 192.168.214.0 MASK 255.255.255.0 192.168.0.14
Tue Jul 11 10:41:11 2017 us=314461 C:\Windows\system32\route.exe ADD 192.168.215.0 MASK 255.255.255.0 192.168.0.15
Tue Jul 11 10:41:11 2017 us=328462 C:\Windows\system32\route.exe ADD 192.168.216.0 MASK 255.255.255.0 192.168.0.16
Tue Jul 11 10:41:11 2017 us=342462 C:\Windows\system32\route.exe ADD 192.168.217.0 MASK 255.255.255.0 192.168.0.17
Tue Jul 11 10:41:11 2017 us=355463 C:\Windows\system32\route.exe ADD 192.168.218.0 MASK 255.255.255.0 192.168.0.18
Tue Jul 11 10:41:11 2017 us=369464 C:\Windows\system32\route.exe ADD 192.168.219.0 MASK 255.255.255.0 192.168.0.19
Tue Jul 11 10:41:11 2017 us=384464 C:\Windows\system32\route.exe ADD 192.168.220.0 MASK 255.255.255.0 192.168.0.20
Tue Jul 11 10:41:11 2017 us=397465 C:\Windows\system32\route.exe ADD 192.168.221.0 MASK 255.255.255.0 192.168.0.21
Tue Jul 11 10:41:11 2017 us=411466 C:\Windows\system32\route.exe ADD 192.168.222.0 MASK 255.255.255.0 192.168.0.22
Tue Jul 11 10:41:11 2017 us=425467 C:\Windows\system32\route.exe ADD 192.168.223.0 MASK 255.255.255.0 192.168.0.23
Tue Jul 11 10:41:11 2017 us=439467 C:\Windows\system32\route.exe ADD 192.168.224.0 MASK 255.255.255.0 192.168.0.24
Tue Jul 11 10:41:11 2017 us=452468 C:\Windows\system32\route.exe ADD 192.168.225.0 MASK 255.255.255.0 192.168.0.25
Tue Jul 11 10:41:11 2017 us=467470 C:\Windows\system32\route.exe ADD 192.168.226.0 MASK 255.255.255.0 192.168.0.26
Tue Jul 11 10:41:11 2017 us=480470 C:\Windows\system32\route.exe ADD 192.168.227.0 MASK 255.255.255.0 192.168.0.27
Tue Jul 11 10:41:11 2017 us=496471 C:\Windows\system32\route.exe ADD 192.168.228.0 MASK 255.255.255.0 192.168.0.28
Tue Jul 11 10:41:11 2017 us=509472 C:\Windows\system32\route.exe ADD 192.168.229.0 MASK 255.255.255.0 192.168.0.29
Tue Jul 11 10:41:11 2017 us=523473 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Jul 11 10:41:11 2017 us=524473 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Jul 11 10:41:11 2017 us=524473 UDPv4 link local (bound): [AF_INET][undef]:1194
Tue Jul 11 10:41:11 2017 us=524473 UDPv4 link remote: [AF_UNSPEC]
Tue Jul 11 10:41:11 2017 us=524473 MULTI: multi_init called, r=256 v=256
Tue Jul 11 10:41:11 2017 us=524473 IFCONFIG POOL: base=192.168.0.2 size=252, ipv6=0
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN2,192.168.0.2', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN3,192.168.0.3', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN4,192.168.0.4', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN5,192.168.0.5', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN6,192.168.0.6', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN7,192.168.0.7', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN8,192.168.0.8', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN9,192.168.0.9', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN10,192.168.0.10', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN11,192.168.0.11', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN12,192.168.0.12', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN13,192.168.0.13', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN14,192.168.0.14', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN15,192.168.0.15', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=524473 ifconfig_pool_read(), in='ClientVPN16,192.168.0.16', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=524473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN17,192.168.0.17', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN18,192.168.0.18', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN19,192.168.0.19', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN20,192.168.0.20', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN21,192.168.0.21', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN22,192.168.0.22', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN23,192.168.0.23', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN24,192.168.0.24', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN25,192.168.0.25', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN26,192.168.0.26', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN27,192.168.0.27', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN28,192.168.0.28', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN29,192.168.0.29', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 ifconfig_pool_read(), in='ClientVPN30,192.168.0.30', TODO: IPv6
Tue Jul 11 10:41:11 2017 us=525473 succeeded -> ifconfig_pool_set()
Tue Jul 11 10:41:11 2017 us=525473 IFCONFIG POOL LIST
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN2,192.168.0.2
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN3,192.168.0.3
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN4,192.168.0.4
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN5,192.168.0.5
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN6,192.168.0.6
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN7,192.168.0.7
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN8,192.168.0.8
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN9,192.168.0.9
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN10,192.168.0.10
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN11,192.168.0.11
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN12,192.168.0.12
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN13,192.168.0.13
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN14,192.168.0.14
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN15,192.168.0.15
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN16,192.168.0.16
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN17,192.168.0.17
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN18,192.168.0.18
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN19,192.168.0.19
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN20,192.168.0.20
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN21,192.168.0.21
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN22,192.168.0.22
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN23,192.168.0.23
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN24,192.168.0.24
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN25,192.168.0.25
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN26,192.168.0.26
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN27,192.168.0.27
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN28,192.168.0.28
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN29,192.168.0.29
Tue Jul 11 10:41:11 2017 us=525473 ClientVPN30,192.168.0.30
Tue Jul 11 10:41:11 2017 us=525473 Initialization Sequence Completed
Tue Jul 11 10:47:24 2017 us=782275 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jul 11 10:47:24 2017 us=782275 TLS Error: incoming packet authentication failed from [AF_INET]192.168.5.1:1194

клиент: 

Jul 11 10:47:24 OpenVPN0 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Jul 11 10:47:24 OpenVPN0 Re-using SSL/TLS context
Jul 11 10:47:24 OpenVPN0 LZO compression initializing
Jul 11 10:47:24 OpenVPN0 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Jul 11 10:47:24 OpenVPN0 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Jul 11 10:47:24 OpenVPN0 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Jul 11 10:47:24 OpenVPN0 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Jul 11 10:47:24 OpenVPN0 TCP/UDP: Preserving recently used remote address: [AF_INET]10.2.9.84:1194
Jul 11 10:47:24 OpenVPN0 Socket Buffers: R=[155648->155648] S=[155648->155648]
Jul 11 10:47:24 OpenVPN0 UDP link local (bound): [AF_INET][undef]:1194
Jul 11 10:47:24 OpenVPN0 UDP link remote: [AF_INET]10.2.9.84:1194
Jul 11 10:48:25 OpenVPN0 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 11 10:48:25 OpenVPN0 TLS Error: TLS handshake failed
Jul 11 10:48:25 OpenVPN0 TCP/UDP: Closing socket
Jul 11 10:48:25 OpenVPN0 SIGUSR1[soft,tls-error] received, process restarting
Jul 11 10:48:25 OpenVPN0 Restart pause, 10 second(s)

повторюсь, этот же конфиг клиента, прикрученный к keenetic+entware работает безупречно.

ЗЫ как сделать вставку с полосой прокрутки, чтобы не занимать столько места? Или нужно было файл прикрепить?

Edited by Сергей Молоков
дополнить
Link to comment
Share on other sites
AndreBA Honored Flooder

AndreBA

Posted
Posted (edited)
14 минуты назад, Сергей Молоков сказал:

ЗЫ как сделать вставку с полосой прокрутки, чтобы не занимать столько места? Или нужно было файл прикрепить?

Цитата

Перед вставкой текста нажать на"ковычки(цитата)" сверху и потом текст всавлять

 

Выделение_012.jpg

Edited by AndreBA
Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted
1 час назад, Le ecureuil сказал:

> interface OpenVPN0 debug

сделал, в журнале ничего не изменилось, перезагрузил роутер, ovpn не стартует (что нужно докрутить, чтобы при загрузке он сам стартовал?).

нажал применить в конфигураторе ovpn-а, в логе все как раньше (перезагрузка не отключает дебаг?)

в прикрепленном файле, до 16:30 загрузка роутера, далее события после нажатия кнопки применить.

client.txt

Link to comment
Share on other sites
Funeral_YAR Member

Funeral_YAR

Posted
Posted

работает

единственная загвоздка была с tls-auth

вместо tls-auth /opt/etc/config/ta.key 1

key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-auth>

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted

Нужно докупить пару кинетиков, на которых будет по витой в WAN провайдер, PPPoE для этого подключения,

OpenVPN и пара, тройка компов по витой в LAN, ВайФай не будет использоваться. Кому отдать предпочтение

Кинетик 3 или Экстра 2?

Спасибо!

Link to comment
Share on other sites
r13 Honored Flooder

r13

Posted
Posted
9 минут назад, Сергей Молоков сказал:

Нужно докупить пару кинетиков, на которых будет по витой в WAN провайдер, PPPoE для этого подключения,

OpenVPN и пара, тройка компов по витой в LAN, ВайФай не будет использоваться. Кому отдать предпочтение

Кинетик 3 или Экстра 2?

Спасибо!

В этих требованиях раз wifi и прочее не надо можно выбирать

между lite 3 rev a и lite 3 rev b

1й как и кинетик 3 с аппаратной разгрузкой pppoe что в принципе чуть-чуть должно помочь выделить больше ресурсов для open vpn. 

Второй как и экстра2 с частичной разгрузкой ipsec но без аппаратной разгрузки pppoe. Платформы предложенных совпадают с выбранными вами вариантами, просто в дополнение есть  usb и wifi 5ghz. Если все это не нужно то можно повыбирать из лайтов, производительность будут аналогичная выбранным вами моделям. 

  • Upvote 1
Link to comment
Share on other sites
spirkaa Newbie

spirkaa

Posted
Posted
В 10/06/2017 в 10:49, Le ecureuil сказал:

И tun, и tap. В системе представляется для совместимости в виде Ethernet-интерфейса, можно включать в Bridge (даже tun ;)), но для tun недоступны VLAN.

OpenVPN уже есть в 2.10 на всем, для чего она собралась.

Единственное ограничение - все ключи должны быть интегрированы в один файл конфига (пример ниже).

Дерзайте! А если что, я хоть и в отпуске, но периодически буду посматривать форум и подскажу с особо непонятными местами.

Если что-то идет не так, то 
> interface OpenVPNX debug

и потом self-test в тему. 


remote 172.16.1.1
dev tun
proto udp
nobind
persist-tun
cipher AES-128-CBC
comp-lzo no
verb 3
ifconfig 10.8.0.2 10.8.0.1
<secret>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
caacc3274dfc05c41f9086261903bb68
adbdd7520caa89ec84a3314eb6eaff5d
49367611a9ec657dbacd47b148ae9f23
cbbbba43ccfc6c6149ee8453a5552944
e31eb1b928c96d9a515dd3f5d486a040
71ccf6a363d94368fb43023c6dcbbb75
3ef0e6fb69525689f3c9bae1ed1fe3b4
72875ae045fe284d70d5388cca730893
c30d4d0d7dd17aafd2e173afd257ab89
9ae308b40cca1f27093e186a59b9f6eb
aca37680e01156dd54cd740fb830c994
eaea8a15074b49e85e126841dea57636
f627d50398e5dc756b07806a9f7374a4
a52016cc3ed51c3ae8ba021e26dba3d5
cc5b0e29472961ec0af0ab76b7270e83
ed27316a395fef6ca5f883850f10632e
-----END OpenVPN Static key V1-----
</secret>

 

С таким конфигом "OpenVPN в прошивке" не запускается. При этом клиент из opkg работает отлично. 

Jul 18 17:04:30 OpenVPN0 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Jul 18 17:04:30 OpenVPN0 Options error: Parameter tls_verify can only be specified in TLS-mode, i.e. where --tls-server or --tls-client is also specified.
Jul 18 17:04:30 OpenVPN0 Use --help for more information.
Jul 18 17:04:30 ndm Service: "OpenVPN": unexpectedly stopped.

 

Примерно после 6-7 таких сообщений перестают открываться настройки интерфейса, вместо этого открывается окно добавления нового подключения - приходится удалять через cli и добавлять заново. Может быть это связано с другими протоколами, точнее их отсутствием - я отключил все и оставил только OpenVPN

 

 

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted
22 часа назад, Funeral_YAR сказал:

работает

единственная загвоздка была с tls-auth

вместо tls-auth /opt/etc/config/ta.key 1

key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-auth>

Спасибо! 

key-direction 1 это то, чего мне не хватало, решилось сразу 2 проблемы, невозможность коннекта, ошибку показывал выше и автостарт OVPN-а!

Позже буду смотреть, как обстоят дела дальше.

17 часов назад, spirkaa сказал:

С таким конфигом "OpenVPN в прошивке" не запускается. При этом клиент из opkg работает отлично.

было все как у вас, попробуйте как говорит spirkaa

Link to comment
Share on other sites
Сергей Молоков Advanced Member

Сергей Молоков

Posted
Posted
22 часа назад, r13 сказал:

в дополнение есть  usb

Я вас понял, спасибо за информацию! Мне нужен усб и так как я использую PPPoE видимо мой вариант Keenetic 3.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...