[Problem] Open VPN

Toggle sidebar Toggle sidebar
Upgrade 3CX to v18 and get it hosted free!
2

20silencer04

Neuer User
Mitglied seit
8 Jan 2013
Beiträge
15
Punkte für Reaktionen
0
Punkte
0
Hi @ all bin neu in dem bereich open vpn.
Habe einen Speedport w920v mit freetz.
Habe mit diie Zertifikate nach diesen Howto gemacht:
http://www.pcwelt.de/ratgeber/OpenV...hluessel-erzeugen-VPN-einrichten-4984557.html
Code: 
- debug_openvpn.out 1/10343 0%
Mon Jan  7 18:22:44 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan  7 18:22:44 2013 Diffie-Hellman initialized with 1024 bit key
Mon Jan  7 18:22:44 2013 Control Channel Authentication: using '/tmp/flash/openvpn/static.key' as a OpenVPN static key file
Mon Jan  7 18:22:44 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan  7 18:22:44 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan  7 18:22:44 2013 Control Channel MTU parms [ L:1559 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Jan  7 18:22:44 2013 Socket Buffers: R=[87380->131072] S=[16384->131072]
Mon Jan  7 18:22:44 2013 TUN/TAP device tun0 opened
Mon Jan  7 18:22:44 2013 TUN/TAP TX queue length set to 100
Mon Jan  7 18:22:44 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jan  7 18:22:44 2013 /sbin/ifconfig tun0 192.168.178.1 pointopoint 192.168.178.2 mtu 1500
Mon Jan  7 18:22:44 2013 Data Channel MTU parms [ L:1559 D:1450 EF:59 EB:4 ET:0 EL:0 ]
Mon Jan  7 18:22:44 2013 chroot to '/tmp/openvpn' and cd to '/' succeeded
Mon Jan  7 18:22:44 2013 GID set to openvpn
Mon Jan  7 18:22:44 2013 UID set to openvpn
Mon Jan  7 18:22:44 2013 Listening for incoming TCP connection on [undef]
Mon Jan  7 18:22:48 2013 TCP connection established with [AF_INET]84.132.90.178:1328
Mon Jan  7 18:22:48 2013 TCPv4_SERVER link local (bound): [undef]
Mon Jan  7 18:22:48 2013 TCPv4_SERVER link remote: [AF_INET]84.132.90.178:1328
Mon Jan  7 18:22:48 2013 TLS: Initial packet from [AF_INET]84.132.90.178:1328, sid=c4bcc0d1 6ecd05a3
Mon Jan  7 18:22:48 2013 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]84.132.90.178:1328
Mon Jan  7 18:22:48 2013 Fatal TLS error (check_tls_errors_co), restarting

Bin da etwas Ratlos da ich mich zum erstenmal mit open vpn beschäftige

Vielen Dank
 
Bitte: Hilf uns helfen und poste deine Configs ;-).
Vermutlich ist entweder "tls-auth" nur auf einer Seite oder die "Richtungen" sind nicht auf beiden Seiten vescheiden
 
Und der Client? Ich tippe weiterhin auf "tls-auth", was im Server aktiviert ist. Wie ist die Einstellung dazu im Client?

Wie es sein müsste, findest du im Freetz-Wiki zum OpenVPN-Paket, bei Windows in dieser Art:
Code: 
tls-auth "D:\\Eigene Dateien\\OpenVPN\\static.key" 1
 
ehm client config sieht so aus
Code: 
##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server.     #
#                                            #
# This configuration can be used by multiple #
# clients, however each client should have   #
# its own cert and key files.                #
#                                            #
# On Windows, you might want to rename this  #
# file so it has a .ovpn extension           #
##############################################

# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client

# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one.  On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap

# Are we connecting to a TCP or
# UDP server?  Use the same setting as
# on the server.
;proto tcp
proto tcp

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote wbcm.zapto.org 1194
;remote my-server-2 1194

# Choose a random host from the remote
# list for load-balancing.  Otherwise
# try hosts in the order specified.
;remote-random

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to
# a specific local port number.
nobind

# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nobody

# Try to preserve some state across restarts.
persist-key
persist-tun

# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here.  See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

# Wireless networks often produce a lot
# of duplicate packets.  Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings

# SSL/TLS parms.
# See the server config file for more
# description.  It's best to use
# a separate .crt/.key file pair
# for each client.  A single ca
# file can be used for all clients.
ca ca.crt
cert CHRIS.crt
key CHRIS.key

# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server".  This is an
# important precaution to protect against
# a potential attack discussed here:
#  http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server".  The build-key-server
# script in the easy-rsa folder will do this.
ns-cert-type server

# If a tls-auth key is used on the server
# then every client must also have the key.
;tls-auth ta.key 1

# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
;cipher x

# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
comp-lzo

# Set log file verbosity.
verb 3

# Silence repeating messages
;mute 20

Ich hoffe ich habe das überhaupt richtig gemacht ich will 5 clienten einbinden.
vielen vielen vielen Dank
 
Wie vermutet ist die tls-Einstellung “falsch“, weil nicht da. Wenn du die zusätzliche Sicherheit durch tls nicht brauchst, lass die Clients so und nimm beim Server den Haken raus. Sonst musst du den statischen Schlüssel der box zum Client kopieren und die “tls-auth“ Zeile rein nehmen (Kommentar-Zeichen entfernen).
 
oky jetzt sieht es schon besser aus aber immer noch fehler ;-)
Code: 
Tue Jan 08 19:06:13 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Jan 08 19:06:13 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Jan 08 19:06:13 2013 LZO compression initialized
Tue Jan 08 19:06:13 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Jan 08 19:06:13 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jan 08 19:06:15 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 08 19:06:15 2013 Local Options hash (VER=V4): '69109d17'
Tue Jan 08 19:06:15 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Tue Jan 08 19:06:15 2013 Attempting to establish TCP connection with 217.94.52.244:1194
Tue Jan 08 19:06:15 2013 TCP connection established with 217.94.52.244:1194
Tue Jan 08 19:06:15 2013 TCPv4_CLIENT link local: [undef]
Tue Jan 08 19:06:15 2013 TCPv4_CLIENT link remote: 217.94.52.244:1194
Tue Jan 08 19:06:16 2013 TLS: Initial packet from 217.94.52.244:1194, sid=54ab07d8 cae0e90e
Tue Jan 08 19:06:16 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Tue Jan 08 19:06:16 2013 VERIFY OK: nsCertType=SERVER
Tue Jan 08 19:06:16 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Tue Jan 08 19:06:17 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 08 19:06:17 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 08 19:06:17 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 08 19:06:17 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 08 19:06:17 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jan 08 19:06:17 2013 [MEINVPN] Peer Connection Initiated with 217.94.52.244:1194
Tue Jan 08 19:06:19 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Tue Jan 08 19:06:19 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.178.0 255.255.255.0'
Tue Jan 08 19:06:19 2013 OPTIONS IMPORT: route options modified
Tue Jan 08 19:06:19 2013 ROUTE default_gateway=192.168.178.1
Tue Jan 08 19:06:19 2013 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Tue Jan 08 19:06:19 2013 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.178.0
Tue Jan 08 19:06:19 2013 TAP-WIN32 device [LAN-Verbindung 4] opened: \\.\Global\{0473AA9F-8531-46E6-AC26-006F878E70D3}.tap
Tue Jan 08 19:06:19 2013 TAP-Win32 Driver Version 9.9 
Tue Jan 08 19:06:19 2013 TAP-Win32 MTU=1500
Tue Jan 08 19:06:19 2013 ERROR: --dev tun also requires --ifconfig
Tue Jan 08 19:06:19 2013 Exiting

log von client
 
Du musst noch das "Tunnel-Netz" beim Server korrigieren (zumindest, wenn du im LAN 192.168.178.x benutzt) und auch einen "DHCP-Bereich" angeben. Wichtig: Im VPN muss ein anderes Netz benutzt werden, als im LAN, also z.B. 192.168.200.x. Damit wäre dann eine Möglichkeit:

Lokale IP 192.168.200.1
Netzmaske 255.255.255.0
DHCP-Range: 192.168.200.10 192.168.200.50

EDIT Tipp: Schau dir nochmal deine Beiträge auf "persönliche Daten" an und mache die per "Bearbeiten" unleserlich.
 
Zuletzt bearbeitet:
also wenn ich das jetzt richtig verstanden habe
lokal ip : 192.168.178.0
netztmaske 255.255.255.0
dhcp ragne : 192.168.200.10 192.168.200.20


ich betzte ja im lan den 192.168.178.x , da möchet ich ja hin.
und bein der client ip nix einstellen oder?!
10000 Dank für deine mühe.
Echt super Forum hier!!!!!
 
oky da scheint immer noch etwas schief zu laufen.
Openvpn Meldet immer kurz verbunden und dann starte er neu.
log vom Client
Code: 
Wed Jan 09 06:56:13 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jan 09 06:56:13 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 06:56:14 2013 LZO compression initialized
Wed Jan 09 06:56:14 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 06:56:14 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 06:56:14 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 09 06:56:14 2013 Local Options hash (VER=V4): '69109d17'
Wed Jan 09 06:56:14 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jan 09 06:56:14 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 06:56:14 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 06:56:14 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 06:56:14 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 06:56:14 2013 TLS: Initial packet from 217.94.35.240:1194, sid=ec5cc5d8 a60252ab
Wed Jan 09 06:56:14 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:14 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 06:56:14 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:15 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:15 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:15 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:15 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:15 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 06:56:15 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 06:56:17 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 06:56:18 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.178.0 255.255.255.0,route 192.168.178.0,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 06:56:18 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 06:56:18 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 06:56:18 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 06:56:18 2013 ROUTE default_gateway=192.168.178.1
Wed Jan 09 06:56:18 2013 TAP-WIN32 device [LAN-Verbindung 4] opened: \\.\Global\{0473AA9F-8531-46E6-AC26-006F878E70D3}.tap
Wed Jan 09 06:56:18 2013 TAP-Win32 Driver Version 9.9 
Wed Jan 09 06:56:18 2013 TAP-Win32 MTU=1500
Wed Jan 09 06:56:18 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.200.10/255.255.255.252 on interface {0473AA9F-8531-46E6-AC26-006F878E70D3} [DHCP-serv: 192.168.200.9, lease-time: 31536000]
Wed Jan 09 06:56:18 2013 NOTE: FlushIpNetTable failed on interface [41] {0473AA9F-8531-46E6-AC26-006F878E70D3} (status=5) : Zugriff verweigert  
Wed Jan 09 06:56:18 2013 Connection reset, restarting [-1]
Wed Jan 09 06:56:18 2013 TCP/UDP: Closing socket
Wed Jan 09 06:56:18 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 06:56:18 2013 Restart pause, 5 second(s)
Wed Jan 09 06:56:23 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 06:56:23 2013 Re-using SSL/TLS context
Wed Jan 09 06:56:23 2013 LZO compression initialized
Wed Jan 09 06:56:23 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 06:56:23 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 06:56:24 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 09 06:56:24 2013 Local Options hash (VER=V4): '69109d17'
Wed Jan 09 06:56:24 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jan 09 06:56:24 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 06:56:24 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 06:56:24 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 06:56:24 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 06:56:24 2013 TLS: Initial packet from 217.94.35.240:1194, sid=9f653d46 5b96c37e
Wed Jan 09 06:56:24 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:24 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 06:56:24 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:25 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:25 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:25 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:25 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:25 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 06:56:25 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 06:56:26 2013 Connection reset, restarting [0]
Wed Jan 09 06:56:26 2013 TCP/UDP: Closing socket
Wed Jan 09 06:56:26 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 06:56:26 2013 Restart pause, 5 second(s)
Wed Jan 09 06:56:31 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 06:56:31 2013 Re-using SSL/TLS context
Wed Jan 09 06:56:31 2013 LZO compression initialized
Wed Jan 09 06:56:31 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 06:56:31 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 06:56:31 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 09 06:56:31 2013 Local Options hash (VER=V4): '69109d17'
Wed Jan 09 06:56:31 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jan 09 06:56:31 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 06:56:31 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 06:56:31 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 06:56:31 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 06:56:31 2013 TLS: Initial packet from 217.94.35.240:1194, sid=b640f02e 9de58f7b
Wed Jan 09 06:56:31 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:31 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 06:56:31 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:32 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:32 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:32 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:32 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:32 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 06:56:32 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 06:56:33 2013 Connection reset, restarting [0]
Wed Jan 09 06:56:33 2013 TCP/UDP: Closing socket
Wed Jan 09 06:56:33 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 06:56:33 2013 Restart pause, 5 second(s)
Wed Jan 09 06:56:38 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 06:56:38 2013 Re-using SSL/TLS context
Wed Jan 09 06:56:38 2013 LZO compression initialized
Wed Jan 09 06:56:38 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 06:56:38 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 06:56:38 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 09 06:56:38 2013 Local Options hash (VER=V4): '69109d17'
Wed Jan 09 06:56:38 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jan 09 06:56:38 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 06:56:38 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 06:56:38 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 06:56:38 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 06:56:38 2013 TLS: Initial packet from 217.94.35.240:1194, sid=681067c4 d480fe9c
Wed Jan 09 06:56:38 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:38 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 06:56:38 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 06:56:39 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:39 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:39 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 06:56:39 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 06:56:39 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 06:56:39 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 06:56:42 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 06:56:42 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.178.0 255.255.255.0,route 192.168.178.0,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 06:56:42 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 06:56:42 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 06:56:42 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 06:56:42 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 06:56:42 2013 Initialization Sequence Completed
Wed Jan 09 06:56:49 2013 Connection reset, restarting [0]
Wed Jan 09 06:56:49 2013 TCP/UDP: Closing socket
Wed Jan 09 06:56:49 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 06:56:49 2013 Restart pause, 5 second(s)

Config client
Code: 
client
dev tun
proto tcp
remote wbcm.zapto.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert CHRIS.crt
key CHRIS.key
ns-cert-type server

pull
comp-lzo

verb 3

# Silence repeating messages
;mute 20

Danke
 
20silencer04 schrieb:
Code: 
Wed Jan 09 06:56:18 2013 NOTE: FlushIpNetTable failed on interface [41] {0473AA9F-8531-46E6-AC26-006F878E70D3} (status=5) : [B]Zugriff verweigert  [/B]
Zum Vergrößern anklicken....
Hat dein User die passenden Rechte?!?
Bei Windows Vista und "neuer" sollte in die Konfig noch:

Code: 
route-method exe
route-delay 2
 
Zuletzt bearbeitet:
Jap habe admin rechte
Log client
Habe den Client config gändernt:

Code: 
Wed Jan 09 08:21:49 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jan 09 08:21:49 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 08:21:49 2013 LZO compression initialized
Wed Jan 09 08:21:49 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 08:21:49 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 08:21:50 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 09 08:21:50 2013 Local Options hash (VER=V4): '69109d17'
Wed Jan 09 08:21:50 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jan 09 08:21:50 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 08:21:50 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 08:21:50 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 08:21:50 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 08:21:50 2013 TLS: Initial packet from 217.94.35.240:1194, sid=0904d401 d64adc7e
Wed Jan 09 08:21:50 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 08:21:50 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 08:21:50 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 08:21:51 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 08:21:51 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 08:21:51 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 08:21:51 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 08:21:51 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 08:21:51 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 08:21:54 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 08:21:54 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.178.0 255.255.255.0,route 192.168.178.0,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 08:21:54 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 08:21:54 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 08:21:54 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 08:21:54 2013 ROUTE default_gateway=192.168.178.1
Wed Jan 09 08:21:54 2013 TAP-WIN32 device [LAN-Verbindung 4] opened: \\.\Global\{0473AA9F-8531-46E6-AC26-006F878E70D3}.tap
Wed Jan 09 08:21:54 2013 TAP-Win32 Driver Version 9.9 
Wed Jan 09 08:21:54 2013 TAP-Win32 MTU=1500
Wed Jan 09 08:21:54 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.200.10/255.255.255.252 on interface {0473AA9F-8531-46E6-AC26-006F878E70D3} [DHCP-serv: 192.168.200.9, lease-time: 31536000]
Wed Jan 09 08:21:54 2013 Successful ARP Flush on interface [41] {0473AA9F-8531-46E6-AC26-006F878E70D3}
Wed Jan 09 08:21:56 2013 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed Jan 09 08:21:56 2013 WARNING: potential route subnet conflict between local LAN [192.168.178.0/255.255.255.0] and remote VPN [192.168.178.0/255.255.255.0]
Wed Jan 09 08:21:56 2013 C:\WINDOWS\system32\route.exe ADD 192.168.178.0 MASK 255.255.255.0 192.168.200.9
 OK!
Wed Jan 09 08:21:56 2013 WARNING: potential route subnet conflict between local LAN [192.168.178.0/255.255.255.0] and remote VPN [192.168.178.0/255.255.255.255]
Wed Jan 09 08:21:56 2013 C:\WINDOWS\system32\route.exe ADD 192.168.178.0 MASK 255.255.255.255 192.168.200.9
 OK!
Wed Jan 09 08:21:56 2013 Initialization Sequence Completed
Wed Jan 09 08:21:56 2013 Connection reset, restarting [0]
Wed Jan 09 08:21:56 2013 TCP/UDP: Closing socket
Wed Jan 09 08:21:56 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 08:21:56 2013 Restart pause, 5 second(s)
Wed Jan 09 08:22:01 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 08:22:01 2013 Re-using SSL/TLS context
Wed Jan 09 08:22:01 2013 LZO compression initialized
Wed Jan 09 08:22:01 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 08:22:01 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 08:22:01 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 09 08:22:01 2013 Local Options hash (VER=V4): '69109d17'
Wed Jan 09 08:22:01 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jan 09 08:22:01 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 08:22:01 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 08:22:01 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 08:22:01 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 08:22:01 2013 TLS: Initial packet from 217.94.35.240:1194, sid=cb5cd626 da9d3892
Wed Jan 09 08:22:02 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 08:22:02 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 08:22:02 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 08:22:03 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 08:22:03 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 08:22:03 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 08:22:03 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 08:22:03 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 08:22:03 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 08:22:05 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 08:22:05 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.178.0 255.255.255.0,route 192.168.178.0,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 08:22:05 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 08:22:05 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 08:22:05 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 08:22:05 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 08:22:05 2013 Initialization Sequence Completed
Wed Jan 09 08:22:05 2013 Connection reset, restarting [0]
Wed Jan 09 08:22:05 2013 TCP/UDP: Closing socket
Wed Jan 09 08:22:05 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 08:22:05 2013 Restart pause, 5 second(s)

config Client
Code: 
;dev-node MyTap
client
dev tun
proto tcp
remote wbcm.zapto.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert CHRIS.crt
key CHRIS.key
ns-cert-type server
route-method exe
route-delay 2
pull
comp-lzo

verb 3

# Silence repeating messages
;mute 20

habe auch noch

Optional: Routing von IP-Netzen:
Lokales Netz: 192.168.178.0 255.255.255.0

Danke
 
Zwei Sachen noch:
Es geht nicht, das Netzt 192.168.178.x durch das VPN zu routen, wenn du schon selbst in dem Netz bist
Code: 
WARNING: potential route subnet conflict between local LAN [192.168.178.0/255.255.255.0] and remote VPN [192.168.178.0/255.255.255.255]
Du kannst das so weder aus dem eigenen Netz, noch aus einem Fremd-Netz machen, wenn dort ebenfalls ein Fritzbox mit Standard-Einstellungen den Internetzugang herstellt.
Das gleiche Netz kann nicht an zwei Orten gleichzeitig sein ;-)

Wenn du jetzt noch "comp-lzo" auf beiden Seiten ein- oder aus-schaltest, dann sollte es gehen.
 
so habe es abgeändert leider kein erfolg:

log des Client
Code: 
Wed Jan 09 15:30:08 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jan 09 15:30:08 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 15:30:08 2013 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 15:30:08 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 15:30:08 2013 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Wed Jan 09 15:30:08 2013 Local Options hash (VER=V4): 'db02a8f8'
Wed Jan 09 15:30:08 2013 Expected Remote Options hash (VER=V4): '7e068940'
Wed Jan 09 15:30:08 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 15:30:08 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 15:30:08 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 15:30:08 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 15:30:08 2013 TLS: Initial packet from 217.94.35.240:1194, sid=04c83cf1 67b02a90
Wed Jan 09 15:30:08 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:08 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 15:30:08 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:09 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:09 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:09 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:09 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:09 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 15:30:09 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 15:30:11 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 15:30:12 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.200.0 255.255.255.0,route 192.168.200.1,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 15:30:12 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 15:30:12 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 15:30:12 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 15:30:12 2013 ROUTE default_gateway=192.168.178.1
Wed Jan 09 15:30:12 2013 TAP-WIN32 device [LAN-Verbindung 4] opened: \\.\Global\{0473AA9F-8531-46E6-AC26-006F878E70D3}.tap
Wed Jan 09 15:30:12 2013 TAP-Win32 Driver Version 9.9 
Wed Jan 09 15:30:12 2013 TAP-Win32 MTU=1500
Wed Jan 09 15:30:12 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.200.10/255.255.255.252 on interface {0473AA9F-8531-46E6-AC26-006F878E70D3} [DHCP-serv: 192.168.200.9, lease-time: 31536000]
Wed Jan 09 15:30:12 2013 Successful ARP Flush on interface [41] {0473AA9F-8531-46E6-AC26-006F878E70D3}
Wed Jan 09 15:30:12 2013 Connection reset, restarting [0]
Wed Jan 09 15:30:12 2013 TCP/UDP: Closing socket
Wed Jan 09 15:30:12 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 15:30:12 2013 Restart pause, 5 second(s)
Wed Jan 09 15:30:17 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 15:30:17 2013 Re-using SSL/TLS context
Wed Jan 09 15:30:17 2013 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 15:30:17 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 15:30:17 2013 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Wed Jan 09 15:30:17 2013 Local Options hash (VER=V4): 'db02a8f8'
Wed Jan 09 15:30:17 2013 Expected Remote Options hash (VER=V4): '7e068940'
Wed Jan 09 15:30:17 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 15:30:17 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 15:30:17 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 15:30:17 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 15:30:17 2013 TLS: Initial packet from 217.94.35.240:1194, sid=25b5bcde f7b12f85
Wed Jan 09 15:30:17 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:17 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 15:30:17 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:18 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:18 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:18 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:18 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:18 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 15:30:18 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 15:30:20 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 15:30:20 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.200.0 255.255.255.0,route 192.168.200.1,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 15:30:20 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 15:30:20 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 15:30:20 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 15:30:20 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 15:30:20 2013 Initialization Sequence Completed
Wed Jan 09 15:30:30 2013 Connection reset, restarting [0]
Wed Jan 09 15:30:30 2013 TCP/UDP: Closing socket
Wed Jan 09 15:30:30 2013 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jan 09 15:30:30 2013 Restart pause, 5 second(s)
Wed Jan 09 15:30:35 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 15:30:35 2013 Re-using SSL/TLS context
Wed Jan 09 15:30:35 2013 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 15:30:35 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 15:30:35 2013 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Wed Jan 09 15:30:35 2013 Local Options hash (VER=V4): 'db02a8f8'
Wed Jan 09 15:30:35 2013 Expected Remote Options hash (VER=V4): '7e068940'
Wed Jan 09 15:30:35 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 15:30:35 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 15:30:35 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 15:30:35 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 15:30:35 2013 TLS: Initial packet from 217.94.35.240:1194, sid=3abb6750 041011fb
Wed Jan 09 15:30:36 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:36 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 15:30:36 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:37 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:37 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:37 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:37 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:37 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 15:30:37 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 15:30:39 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 15:30:39 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.200.0 255.255.255.0,route 192.168.200.1,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 15:30:39 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 15:30:39 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 15:30:39 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 15:30:39 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 15:30:39 2013 Initialization Sequence Completed
Wed Jan 09 15:30:45 2013 Authenticate/Decrypt packet error: cipher final failed
Wed Jan 09 15:30:45 2013 Fatal decryption error (process_incoming_link), restarting
Wed Jan 09 15:30:45 2013 TCP/UDP: Closing socket
Wed Jan 09 15:30:45 2013 SIGUSR1[soft,decryption-error] received, process restarting
Wed Jan 09 15:30:45 2013 Restart pause, 5 second(s)
Wed Jan 09 15:30:50 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 15:30:50 2013 Re-using SSL/TLS context
Wed Jan 09 15:30:50 2013 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 15:30:50 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 15:30:51 2013 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Wed Jan 09 15:30:51 2013 Local Options hash (VER=V4): 'db02a8f8'
Wed Jan 09 15:30:51 2013 Expected Remote Options hash (VER=V4): '7e068940'
Wed Jan 09 15:30:51 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 15:30:51 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 15:30:51 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 15:30:51 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 15:30:51 2013 TLS: Initial packet from 217.94.35.240:1194, sid=942c330c 4b1b623a
Wed Jan 09 15:30:52 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:52 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 15:30:52 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:30:52 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:52 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:52 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:30:52 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:30:52 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 15:30:52 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 15:30:55 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 15:30:55 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.200.0 255.255.255.0,route 192.168.200.1,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 15:30:55 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 15:30:55 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 15:30:55 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 15:30:55 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 15:30:55 2013 Initialization Sequence Completed
Wed Jan 09 15:31:05 2013 Authenticate/Decrypt packet error: cipher final failed
Wed Jan 09 15:31:05 2013 Fatal decryption error (process_incoming_link), restarting
Wed Jan 09 15:31:05 2013 TCP/UDP: Closing socket
Wed Jan 09 15:31:05 2013 SIGUSR1[soft,decryption-error] received, process restarting
Wed Jan 09 15:31:05 2013 Restart pause, 5 second(s)
Wed Jan 09 15:31:10 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 15:31:10 2013 Re-using SSL/TLS context
Wed Jan 09 15:31:10 2013 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 15:31:10 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 15:31:10 2013 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Wed Jan 09 15:31:10 2013 Local Options hash (VER=V4): 'db02a8f8'
Wed Jan 09 15:31:10 2013 Expected Remote Options hash (VER=V4): '7e068940'
Wed Jan 09 15:31:10 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 15:31:10 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 15:31:10 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 15:31:10 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 15:31:10 2013 TLS: Initial packet from 217.94.35.240:1194, sid=54bb8d24 e2e3c42a
Wed Jan 09 15:31:11 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:31:11 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 15:31:11 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:31:12 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:31:12 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:31:12 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:31:12 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:31:12 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 15:31:12 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 15:31:14 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 15:31:14 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.200.0 255.255.255.0,route 192.168.200.1,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 15:31:14 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 15:31:14 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 15:31:14 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 15:31:14 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 15:31:14 2013 Initialization Sequence Completed
Wed Jan 09 15:31:25 2013 Authenticate/Decrypt packet error: cipher final failed
Wed Jan 09 15:31:25 2013 Fatal decryption error (process_incoming_link), restarting
Wed Jan 09 15:31:25 2013 TCP/UDP: Closing socket
Wed Jan 09 15:31:25 2013 SIGUSR1[soft,decryption-error] received, process restarting
Wed Jan 09 15:31:25 2013 Restart pause, 5 second(s)
Wed Jan 09 15:31:30 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 09 15:31:30 2013 Re-using SSL/TLS context
Wed Jan 09 15:31:30 2013 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jan 09 15:31:30 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jan 09 15:31:30 2013 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Wed Jan 09 15:31:30 2013 Local Options hash (VER=V4): 'db02a8f8'
Wed Jan 09 15:31:30 2013 Expected Remote Options hash (VER=V4): '7e068940'
Wed Jan 09 15:31:30 2013 Attempting to establish TCP connection with 217.94.35.240:1194
Wed Jan 09 15:31:30 2013 TCP connection established with 217.94.35.240:1194
Wed Jan 09 15:31:30 2013 TCPv4_CLIENT link local: [undef]
Wed Jan 09 15:31:30 2013 TCPv4_CLIENT link remote: 217.94.35.240:1194
Wed Jan 09 15:31:30 2013 TLS: Initial packet from 217.94.35.240:1194, sid=ccffd6e1 f3fd897d
Wed Jan 09 15:31:30 2013 VERIFY OK: depth=1, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:31:30 2013 VERIFY OK: nsCertType=SERVER
Wed Jan 09 15:31:30 2013 VERIFY OK: depth=0, /C=DE/ST=NRW/L=ISERLOHN/O=FRITZBOX/OU=OPENVPN/CN=MEINVPN/name=MEINVPN/[email protected]
Wed Jan 09 15:31:31 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:31:31 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:31:31 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 09 15:31:31 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 09 15:31:31 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 09 15:31:31 2013 [MEINVPN] Peer Connection Initiated with 217.94.35.240:1194
Wed Jan 09 15:31:33 2013 SENT CONTROL [MEINVPN]: 'PUSH_REQUEST' (status=1)
Wed Jan 09 15:31:34 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.200.0 255.255.255.0,route 192.168.200.1,ping 10,ping-restart 120,ifconfig 192.168.200.10 192.168.200.9'
Wed Jan 09 15:31:34 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 09 15:31:34 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 09 15:31:34 2013 OPTIONS IMPORT: route options modified
Wed Jan 09 15:31:34 2013 Preserving previous TUN/TAP instance: LAN-Verbindung 4
Wed Jan 09 15:31:34 2013 Initialization Sequence Completed
Wed Jan 09 15:31:44 2013 Authenticate/Decrypt packet error: cipher final failed
Wed Jan 09 15:31:44 2013 Fatal decryption error (process_incoming_link), restarting
Wed Jan 09 15:31:44 2013 TCP/UDP: Closing socket
Wed Jan 09 15:31:44 2013 SIGUSR1[soft,decryption-error] received, process restarting
Wed Jan 09 15:31:44 2013 Restart pause, 5 second(s)


config des Client
Code: 
client
dev tun
proto tcp
remote wbcm.zapto.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert CHRIS.crt
key CHRIS.key
ns-cert-type server
route-method exe
route-delay 2
pull


verb 3

Die IP der Fritzbox ist 192.168.178.1
und der DHCP ist von 192.168.178.10 -192.168.178.150

VPN IP-Adressen und Routing im VPN

Lokale IP-Adresse: 192.168.200.1
Netzmaske: 255.255.255.0
DHCP-Range für Clients:192.168.200.10 192.168.200.20
Optional: Routing von IP-Netzen:
Lokales Netz: 192.168.200.0 255.255.255.0


Vielen dank ich steht irgendwie auf dem schlauch
 
20silencer04 schrieb:
Code: 
Wed Jan 09 15:30:45 2013 Authenticate/Decrypt packet error: cipher final failed

Wed Jan 09 15:31:05 2013 Authenticate/Decrypt packet error: cipher final failed
Zum Vergrößern anklicken....
Einen hab ich noch: Im Client auch den "cipher aes-128-cbc" eintragen, oder im Server "blowfish" wählen.
 
Super sache 1000000000000000000000000000000000000 Danke jetzt klappt es.

Jetzt habe ich noch eine frage ich bekomme jetzt die ip 192.168.200.10
Ich möchte aber auf meine NAS Zugreifen.
Der Leigen aber im ip Bereich 192.168.178.10 -192.168.178.150.
Wie bekomme ich das hin.
Nochmals 10000000 Dank
 
Das wird nicht gehen, wenn du mit deinem Client in einem Netz bist, was auch "192.168.178.x" ist.
Ansonsten müsstest du wie am Anfang bei "Lokales Netz" dein LAN eintragen: 192.168.178.0 255.255.255.0

Wenn du zwingend den Client im Netz 192.168.178.x hast, müsstest du dein LAN an der FB ändern, damit das klappt...
 
oky habe die ip der Fb auf 192.168.10.x gelegt von 20 -150
Darf sich der dhcp mit dem dchp des VPN.
Lokale IP-Adresse: 192.168.10.0
Netzmaske :255.255.255.0
DHCP-Range für Clients: 192.168.10.160 192.168.10.180
Optional: Routing von IP-Netzen: 192.168.10.0 255.255.255.0

Ist das OKY ?
 
Nein, das VPN-Netz und das LAN der Box müssen unterschiedlich sein und dürfen nicht im gleichen Netz sein!
Die Erreichbarkeit der Geräte im LAN funktioniert dann ganz normal über das Routing in das Netz.

Einzige zulässige Konfig, in dem die Netze gleich sind, ist eine OpenVPN Brücken-Konfig, bei der dann das VPN mit dem LAN "gebridged" werden muss.
 
Um antworten zu können musst du eingeloggt sein.
Kostenlos!
Jetzt holen

Neueste Beiträge

Kategorien

Wissenswertes

Statistik des Forums

Themen
248,920
Beiträge
2,305,114
Mitglieder
378,645
Neuestes Mitglied
nikitarajusa

3CX jetzt einen Monat kostenlos testen

Die Verbindung, Zusammenarbeit und Kommunikation mit Ihrem Team und Ihren Kunden war noch nie so einfach. Nutzen Sie unsere kostenlose 30-Tage-Testversion und entdecken Sie die richtige Lösung für Ihr Unternehmen.

3CX start your free trial guy
Für diese E-Mail-Adresse besteht bereits ein 3CX-Konto. Sie werden zum Kundenportal weitergeleitet, wo Sie sich anmelden oder Ihr Passwort zurücksetzen können, falls Sie dieses vergessen haben.
| Style by ThemeHouse
XenPorta 2 PRO © Jason Axelrod of 8WAYRUN
Oben Unten