OpenVPN + FB7050 als Server?

MaxMuster · 19 Mrz 2008

... am besten trägst du dein ganzes Netz ein (bei der "Standard-Box" halt route 192.168.178.0 255.255.255.0), dann kannst du alle Geräte im LAN erreichen, zumindest wenn die Fritzbox das Standardgateway in deinem LAN ist. Denn der Client hat ja dann z.B. die IP 10.8.0.2 und nur die Fritzbox kennt den Weg dahin.

Jörg

Hasenmelker · 20 Mrz 2008

Hallo...

so denke ich habe nun alles richtig gemacht. Habe die Datei von The-Contruct drauf (mit Openvpn und Virtueller Netzwerkkarte einrichten)

Habe dann die Server.ovpn:

Code:

dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key

und die Client.ovpn auf dem Laptop:

Code:

remote xyz.dyndns.info
dev tun
ifconfig 10.8.0.2 10.8.0.1
#route 192.168.36.0 255.255.255.0
secret E:\\programme\\openvpn\\key.key (heisst anders, ist aber der gleiche)

Die verbindung scheint zu klappen. Hier mal der Log:

Code:

hu Mar 20 11:18:46 2008 OpenVPN 2.1_rc7 Win32-MinGW [SSL] [LZO2] [PKCS11] built on Jan 29 2008
Thu Mar 20 11:18:46 2008 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Mar 20 11:18:47 2008 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{83698A28-A87F-4A38-86C3-C23ACE6A56EC}.tap
Thu Mar 20 11:18:47 2008 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {83698A28-A87F-4A38-86C3-C23ACE6A56EC} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Thu Mar 20 11:18:47 2008 Successful ARP Flush on interface [4] {83698A28-A87F-4A38-86C3-C23ACE6A56EC}
Thu Mar 20 11:18:47 2008 UDPv4 link local (bound): [undef]:1194
Thu Mar 20 11:18:47 2008 UDPv4 link remote: 12.128.44.435:1194

Jetzt weiss ich nur noch noch nicht wie ich auf die NAS oder anderen Netzwerkgeräte zugreifen kann. Auf dem Laptop habe ich bei der virtuellen Netzwerkkarte von Openvpn kein Traffic (ist das so richtig?)

Desweiteren habe ich beim Client einfach mal die "#" entfernt um auch eine Verbindung über einen anderen Internetzugang zu testen. (muss für den normalen Betrieb, in der Client.ovpn, noch was hinzugefügt werden??) Scheint auch zu klappen. Die beiden Openvpn-Client Monitore (mit der kleinen Weltkugel) werden gelb. Genauso wie im LAN.

Bye

MaxMuster · 20 Mrz 2008

Na, es wird ja besser ;-) Erster Versuch ist immer, die Gegenstelle zu erreichen, also bei dir ein
"ping 10.8.0.1" vom Client aus. Wenn das soweit klappt, wären die nächsten Schritte:
- Ping auf die Server-Box mit der LAN-IP der Box
- Ping auf ein Gerät im LAN
- Verbindungsversuch (z.B. mit FTP oder Anbinden eines Laufwerkes)

Bei "Windowszugriffen" ist zweierlei zu bedenken: Die normale Namensauflösung funktioniert nicht, dazu muss die IP herhalten (z.B. mit "net use x: \\192.168.36.123\Freigabe"). Alternativ funktioniert auch ein Eintrag in der lmhosts des Client PCs. Zum anderen muss evtl die Firewall auf den Systemen abgeschaltet oder angepasst werden, da der Client aus einem anderen Netz kommt.

Jörg

Hasenmelker · 20 Mrz 2008

Hallo...

hm mit dem anpingen geht leider nicht. Bekomme keine Anwort... müsste ich nicht die genutzte WLAN/LAN- Karte des PC´s noch mit der virtuellen des Openvpn-Clienten verbinden?

Geht das überhaupt per WLAN? Ist ja das gleiche Protokoll.

EDIT: die 10.8.0.2 kann ich anpingen. die 10.8.0.1 nicht...
wie pinge ich die Fritzbox an? wenn ich nur die IP der FB eingebe, ping er über die WLAN-Karte und nicht über die VPN-Verbindung. Oder brauche ich noch ein extra Programm?

Bye

MaxMuster · 20 Mrz 2008

Die VPN-IP des Servers muss als erstes erreichbar sein. Dafür musst du wenn du "von drinnen" testest den "route ..." Befehl auskommentieren.

Wenn der Ping auf die 10.0.8.1 noch immer nicht geht, dann mal ein komplettes Log des Aufbaus posten, ggf mit "verb 6" in der Config.

Jörg

Hasenmelker · 20 Mrz 2008

[Edit frank_m24: Sinnfreies Fullquote vom Beitrag direkt darüber gelöscht. Lies noch mal die Forumregeln.]

Hallo Jörg...

also irgend klappt das nicht...

Habe nun die Route rausgenommen. ping aufgeführt-->"Zeitüberschreitung usw"

Wenn ich jedoch in der Client.ovpn bei ifconfig statt:

Code:

ifconfig 10.8.0.2 10.8.0.1

Code:

ifconfig 10.8.0.1 10.8.0.2

also nur die letzte Zahl ändere, kann ich zumindest die 10.8.0.1 pingen. Die 10.8.0.2 nicht.

So dann hier verb 6:

Code:

Thu Mar 20 17:49:21 2008 us=87000 Current Parameter Settings:
Thu Mar 20 17:49:21 2008 us=87000   config = 'client.ovpn'
Thu Mar 20 17:49:21 2008 us=87000   mode = 0
Thu Mar 20 17:49:21 2008 us=87000   show_ciphers = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   show_digests = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   show_engines = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   genkey = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   key_pass_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   show_tls_ciphers = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   proto = 0
Thu Mar 20 17:49:21 2008 us=87000   local = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   remote_list[0] = {'commanderfritzbox.dyndns.info', 1194}
Thu Mar 20 17:49:21 2008 us=87000   remote_random = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   local_port = 1194
Thu Mar 20 17:49:21 2008 us=87000   remote_port = 1194
Thu Mar 20 17:49:21 2008 us=87000   remote_float = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   ipchange = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   bind_defined = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   bind_local = ENABLED
Thu Mar 20 17:49:21 2008 us=87000   dev = 'tun'
Thu Mar 20 17:49:21 2008 us=87000   dev_type = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   dev_node = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   lladdr = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   topology = 1
Thu Mar 20 17:49:21 2008 us=87000   tun_ipv6 = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   ifconfig_local = '10.8.0.2'
Thu Mar 20 17:49:21 2008 us=87000   ifconfig_remote_netmask = '10.8.0.1'
Thu Mar 20 17:49:21 2008 us=87000   ifconfig_noexec = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   ifconfig_nowarn = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   shaper = 0
Thu Mar 20 17:49:21 2008 us=87000   tun_mtu = 1500
Thu Mar 20 17:49:21 2008 us=87000   tun_mtu_defined = ENABLED
Thu Mar 20 17:49:21 2008 us=87000   link_mtu = 1500
Thu Mar 20 17:49:21 2008 us=87000   link_mtu_defined = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   tun_mtu_extra = 0
Thu Mar 20 17:49:21 2008 us=87000   tun_mtu_extra_defined = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   fragment = 0
Thu Mar 20 17:49:21 2008 us=87000   mtu_discover_type = -1
Thu Mar 20 17:49:21 2008 us=87000   mtu_test = 0
Thu Mar 20 17:49:21 2008 us=87000   mlock = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   keepalive_ping = 0
Thu Mar 20 17:49:21 2008 us=87000   keepalive_timeout = 0
Thu Mar 20 17:49:21 2008 us=87000   inactivity_timeout = 0
Thu Mar 20 17:49:21 2008 us=87000   ping_send_timeout = 0
Thu Mar 20 17:49:21 2008 us=87000   ping_rec_timeout = 0
Thu Mar 20 17:49:21 2008 us=87000   ping_rec_timeout_action = 0
Thu Mar 20 17:49:21 2008 us=87000   ping_timer_remote = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   remap_sigusr1 = 0
Thu Mar 20 17:49:21 2008 us=87000   explicit_exit_notification = 0
Thu Mar 20 17:49:21 2008 us=87000   persist_tun = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   persist_local_ip = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   persist_remote_ip = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   persist_key = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   mssfix = 1450
Thu Mar 20 17:49:21 2008 us=87000   resolve_retry_seconds = 1000000000
Thu Mar 20 17:49:21 2008 us=87000   connect_retry_seconds = 5
Thu Mar 20 17:49:21 2008 us=87000   connect_timeout = 10
Thu Mar 20 17:49:21 2008 us=87000   connect_retry_max = 0
Thu Mar 20 17:49:21 2008 us=87000   username = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   groupname = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   chroot_dir = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   cd_dir = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   writepid = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   up_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   down_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=87000   down_pre = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   up_restart = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   up_delay = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   daemon = DISABLED
Thu Mar 20 17:49:21 2008 us=87000   inetd = 0
Thu Mar 20 17:49:21 2008 us=197000   log = DISABLED
Thu Mar 20 17:49:21 2008 us=197000   suppress_timestamps = DISABLED
Thu Mar 20 17:49:21 2008 us=197000   nice = 0
Thu Mar 20 17:49:21 2008 us=197000   verbosity = 6
Thu Mar 20 17:49:21 2008 us=197000   mute = 0
Thu Mar 20 17:49:21 2008 us=197000   gremlin = 0
Thu Mar 20 17:49:21 2008 us=197000   status_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=197000   status_file_version = 1
Thu Mar 20 17:49:21 2008 us=197000   status_file_update_freq = 60
Thu Mar 20 17:49:21 2008 us=197000   occ = ENABLED
Thu Mar 20 17:49:21 2008 us=197000   rcvbuf = 0
Thu Mar 20 17:49:21 2008 us=197000   sndbuf = 0
Thu Mar 20 17:49:21 2008 us=197000   sockflags = 0
Thu Mar 20 17:49:21 2008 us=197000   socks_proxy_server = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=197000   socks_proxy_port = 0
Thu Mar 20 17:49:21 2008 us=197000   socks_proxy_retry = DISABLED
Thu Mar 20 17:49:21 2008 us=197000   fast_io = DISABLED
Thu Mar 20 17:49:21 2008 us=197000   lzo = 0
Thu Mar 20 17:49:21 2008 us=207000   route_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=207000   route_default_gateway = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=207000   route_default_metric = 0
Thu Mar 20 17:49:21 2008 us=207000   route_noexec = DISABLED
Thu Mar 20 17:49:21 2008 us=207000   route_delay = 5
Thu Mar 20 17:49:21 2008 us=207000   route_delay_window = 30
Thu Mar 20 17:49:21 2008 us=207000   route_delay_defined = ENABLED
Thu Mar 20 17:49:21 2008 us=207000   route_nopull = DISABLED
Thu Mar 20 17:49:21 2008 us=207000   management_addr = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=207000   management_port = 0
Thu Mar 20 17:49:21 2008 us=207000   management_user_pass = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=207000   management_log_history_cache = 250
Thu Mar 20 17:49:21 2008 us=207000   management_echo_buffer_size = 100
Thu Mar 20 17:49:21 2008 us=207000   management_query_passwords = DISABLED
Thu Mar 20 17:49:21 2008 us=207000   management_hold = DISABLED
Thu Mar 20 17:49:21 2008 us=207000   management_client = DISABLED
Thu Mar 20 17:49:21 2008 us=217000   management_signal = DISABLED
Thu Mar 20 17:49:21 2008 us=217000   management_forget_disconnect = DISABLED
Thu Mar 20 17:49:21 2008 us=217000   management_write_peer_info_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=217000   shared_secret_file = 'e:\programme\openvpn\key.key'
Thu Mar 20 17:49:21 2008 us=217000   key_direction = 0
Thu Mar 20 17:49:21 2008 us=217000   ciphername_defined = ENABLED
Thu Mar 20 17:49:21 2008 us=217000   ciphername = 'BF-CBC'
Thu Mar 20 17:49:21 2008 us=217000   authname_defined = ENABLED
Thu Mar 20 17:49:21 2008 us=217000   authname = 'SHA1'
Thu Mar 20 17:49:21 2008 us=217000   keysize = 0
Thu Mar 20 17:49:21 2008 us=217000   engine = DISABLED
Thu Mar 20 17:49:21 2008 us=217000   replay = ENABLED
Thu Mar 20 17:49:21 2008 us=217000   mute_replay_warnings = DISABLED
Thu Mar 20 17:49:21 2008 us=217000   replay_window = 64
Thu Mar 20 17:49:21 2008 us=217000   replay_time = 15
Thu Mar 20 17:49:21 2008 us=227000   packet_id_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   use_iv = ENABLED
Thu Mar 20 17:49:21 2008 us=227000   test_crypto = DISABLED
Thu Mar 20 17:49:21 2008 us=227000   tls_server = DISABLED
Thu Mar 20 17:49:21 2008 us=227000   tls_client = DISABLED
Thu Mar 20 17:49:21 2008 us=227000   key_method = 2
Thu Mar 20 17:49:21 2008 us=227000   ca_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   ca_path = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   dh_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   cert_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   priv_key_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   pkcs12_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   cryptoapi_cert = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   cipher_list = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   tls_verify = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   tls_remote = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=227000   crl_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=237000   ns_cert_type = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=237000   remote_cert_ku[i] = 0
Thu Mar 20 17:49:21 2008 us=247000   remote_cert_eku = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=247000   tls_timeout = 2
Thu Mar 20 17:49:21 2008 us=247000   renegotiate_bytes = 0
Thu Mar 20 17:49:21 2008 us=247000   renegotiate_packets = 0
Thu Mar 20 17:49:21 2008 us=247000   renegotiate_seconds = 3600
Thu Mar 20 17:49:21 2008 us=247000   handshake_window = 60
Thu Mar 20 17:49:21 2008 us=247000   transition_window = 3600
Thu Mar 20 17:49:21 2008 us=247000   single_session = DISABLED
Thu Mar 20 17:49:21 2008 us=247000   tls_exit = DISABLED
Thu Mar 20 17:49:21 2008 us=247000   tls_auth_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=247000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=247000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=247000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=247000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=247000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=257000   pkcs11_protected_authentication = DISABLED
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=267000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_private_mode = 00000000
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=277000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=287000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=287000   pkcs11_cert_private = DISABLED
Thu Mar 20 17:49:21 2008 us=287000   pkcs11_pin_cache_period = -1
Thu Mar 20 17:49:21 2008 us=287000   pkcs11_id = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=287000   server_network = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   server_netmask = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   server_bridge_ip = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   server_bridge_netmask = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   server_bridge_pool_start = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   server_bridge_pool_end = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   ifconfig_pool_defined = DISABLED
Thu Mar 20 17:49:21 2008 us=287000   ifconfig_pool_start = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   ifconfig_pool_end = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   ifconfig_pool_netmask = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=287000   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   ifconfig_pool_persist_refresh_freq = 600
Thu Mar 20 17:49:21 2008 us=297000   n_bcast_buf = 256
Thu Mar 20 17:49:21 2008 us=297000   tcp_queue_limit = 64
Thu Mar 20 17:49:21 2008 us=297000   real_hash_size = 256
Thu Mar 20 17:49:21 2008 us=297000   virtual_hash_size = 256
Thu Mar 20 17:49:21 2008 us=297000   client_connect_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   learn_address_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   client_disconnect_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   client_config_dir = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   ccd_exclusive = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   tmp_dir = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   push_ifconfig_defined = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   push_ifconfig_local = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=297000   push_ifconfig_remote_netmask = 0.0.0.0
Thu Mar 20 17:49:21 2008 us=297000   enable_c2c = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   duplicate_cn = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   cf_max = 0
Thu Mar 20 17:49:21 2008 us=297000   cf_per = 0
Thu Mar 20 17:49:21 2008 us=297000   max_clients = 1024
Thu Mar 20 17:49:21 2008 us=297000   max_routes_per_client = 256
Thu Mar 20 17:49:21 2008 us=297000   client_cert_not_required = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   username_as_common_name = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   auth_user_pass_verify_script = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   auth_user_pass_verify_script_via_file = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   client = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   pull = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   auth_user_pass_file = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=297000   show_net_up = DISABLED
Thu Mar 20 17:49:21 2008 us=297000   route_method = 0
Thu Mar 20 17:49:21 2008 us=307000   ip_win32_defined = DISABLED
Thu Mar 20 17:49:21 2008 us=307000   ip_win32_type = 3
Thu Mar 20 17:49:21 2008 us=307000   dhcp_masq_offset = 0
Thu Mar 20 17:49:21 2008 us=307000   dhcp_lease_time = 31536000
Thu Mar 20 17:49:21 2008 us=307000   tap_sleep = 0
Thu Mar 20 17:49:21 2008 us=307000   dhcp_options = DISABLED
Thu Mar 20 17:49:21 2008 us=307000   dhcp_renew = DISABLED
Thu Mar 20 17:49:21 2008 us=307000   dhcp_pre_release = DISABLED
Thu Mar 20 17:49:21 2008 us=307000   dhcp_release = DISABLED
Thu Mar 20 17:49:21 2008 us=307000   domain = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=307000   netbios_scope = '[UNDEF]'
Thu Mar 20 17:49:21 2008 us=307000   netbios_node_type = 0
Thu Mar 20 17:49:21 2008 us=307000   disable_nbt = DISABLED
Thu Mar 20 17:49:21 2008 us=307000 OpenVPN 2.1_rc7 Win32-MinGW [SSL] [LZO2] [PKCS11] built on Jan 29 2008
Thu Mar 20 17:49:21 2008 us=337000 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Mar 20 17:49:21 2008 us=347000 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 20 17:49:21 2008 us=347000 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 20 17:49:21 2008 us=347000 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 20 17:49:21 2008 us=347000 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 20 17:49:21 2008 us=427000 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{83698A28-A87F-4A38-86C3-C23ACE6A56EC}.tap
Thu Mar 20 17:49:21 2008 us=427000 TAP-Win32 Driver Version 9.4 
Thu Mar 20 17:49:21 2008 us=427000 TAP-Win32 MTU=1500
Thu Mar 20 17:49:21 2008 us=427000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {83698A28-A87F-4A38-86C3-C23ACE6A56EC} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Thu Mar 20 17:49:21 2008 us=427000 Successful ARP Flush on interface [4] {83698A28-A87F-4A38-86C3-C23ACE6A56EC}
Thu Mar 20 17:49:21 2008 us=437000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Thu Mar 20 17:49:21 2008 us=437000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Mar 20 17:49:21 2008 us=437000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Mar 20 17:49:21 2008 us=437000 Local Options hash (VER=V4): 'd3880969'
Thu Mar 20 17:49:21 2008 us=437000 Expected Remote Options hash (VER=V4): 'c41bf3b8'
Thu Mar 20 17:49:21 2008 us=437000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 20 17:49:21 2008 us=437000 UDPv4 link local (bound): [undef]:1194
Thu Mar 20 17:49:21 2008 us=437000 UDPv4 link remote: 80.128.107.103:1194
Thu Mar 20 17:49:31 2008 us=51000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:49:41 2008 us=146000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:49:51 2008 us=360000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:50:01 2008 us=455000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:50:11 2008 us=870000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:50:21 2008 us=564000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:50:31 2008 us=838000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:50:41 2008 us=953000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:50:51 2008 us=887000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:51:01 2008 us=101000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:51:11 2008 us=285000 UDPv4 WRITE [60] to 80.128.107.103:1194:  DATA len=60
Thu Mar 20 17:51:21 2008 us=830000 NOTE: failed to obtain options consistency info from peer -- this could occur if the remote peer is running a version of OpenVPN before 1.5-beta8 or if there is a network connectivity problem, and will not necessarily prevent OpenVPN from running (0 bytes received from peer, 0 bytes authenticated data channel traffic) -- you can disable the options consistency check with --disable-occ.

Kann man anhand dieser Lister erkennen ob der VPNServer überhaupt läuft? Zur Sicherheit hier nochmal die "PS" aus der FB:

Code:

# ps
  PID  Uid     VmSize Stat Command
    1 root        336 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    6 root            SW< [kblockd/0]
   23 root            SW< [pdflush]
   24 root            SW< [pdflush]
   26 root            SW< [aio/0]
   25 root            SW  [kswapd0]
   62 root            SW  [pm_info]
   70 root            SW  [mtdblockd]
   96 root            SW  [tffsd_mtd_0]
  340 root            SW< [capi_oslib]
  341 root            SW< [capi_oslib]
  342 root            SW  [ubik2_tx[8]]
  343 root            SW  [capitransp]
  389 root       2548 S N ctlmgr
  411 root        472 S   wpa_authenticator
  422 root        992 S   usermand
  434 root       1032 S N websrv
  439 root       1384 S   igdd
  441 root       1032 S N websrv
  442 root       1032 S N websrv
  443 root       1032 S N websrv
  448 root       1316 S   multid
  456 root       1276 S   dsld -i -n
  470 root       1144 S   telefon a127.0.0.1
  475 root        304 S   telnetd -l /sbin/ar7login
  477 root       1560 S < voipd
  488 root        192 S   /bin/run_clock -c /dev/tffs -d
  493 root        336 S   init
  494 root        624 S   capiotcp_server -p5031 -m1
  495 root       1384 S   igdd
  496 root       1384 S   igdd
  497 root       1384 S   igdd
  588 root            RWN [kdsld_token]
 1013 root        432 S   -sh
 1101 root        360 R   ps
#

bye

MaxMuster · 20 Mrz 2008

Hallo,

so wie es aussieht, läuft der Server tatsächlich nicht.

Schau dir doch mal die Config an, ob die stimmt ("cat /var/tmp/server.ovpn") und starte dann doch nochmal von Hand mit "/var/tmp/openvpn --config /var/tmp/server.ovpn" und schau dir die Meldungen an (und poste sie ggf. hier).

Jörg

Hasenmelker · 21 Mrz 2008

Guten morgen...

habe es mir doch fast gedacht. Hier die Meldungen:

Code:

# cat /var/tmp/server.ovpn
cat: /var/tmp/server.ovpn: No such file or directory

Code:

# /var/tmp/openvpn --config /var/tmp/server.ovpn
-sh: /var/tmp/openvpn: not found

Also ist nichts da. Habe auch schon vorher in den Verzeichnissen geschaut und da war nichts.
Irgendwie glaube ich, das meine FB dafür nicht geeignet ist.....

Hier mal die "install" von "the Contruct"

Code:

#!/bin/sh

##################################################################################
# install results:
##################################################################################
export INSTALL_SUCCESS_NO_REBOOT=0
export INSTALL_SUCCESS_REBOOT=1
export INSTALL_WRONG_HARDWARE=2
export INSTALL_KERNEL_CHECKSUM=3
export INSTALL_FILESYSTEM_CHECKSUM=4
export INSTALL_URLADER_CHECKSUM=5
export INSTALL_OTHER_ERROR=6
export INSTALL_FIRMWARE_VERSION=7

##################################################################################

echo "install: check and install new firmware ..."
LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi

##################################################################################
# start info led flashing
##################################################################################
echo "set INFO led to blink (modul=7, state=4)"
echo 7,4 > ${LED_DEVICE}
cat > /var/tmp/debug.cfg << 'EOF'
#!/bin/sh

LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 120

# load VPN-Server (OpenVPN)

# create tun-device
mknod /var/tmp/tun c 10 200

# write 'secret.key' to file
cat > /var/tmp/secret.key << 'ENDSECRETKEY'
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
von mir gändert
-----END OpenVPN Static key V1-----

ENDSECRETKEY

# write 'server.ovpn' to file
cat > /var/tmp/server.ovpn << 'ENDSERVERCONF'
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key
ENDSERVERCONF

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/openvpn ]
  then
    echo "copy ${f}/files/${KERNEL_VERSION}/openvpn"
    cp ${f}/files/${KERNEL_VERSION}/openvpn /var/tmp/openvpn
  fi
done
# check if file already exists
if [ ! -f /var/tmp/openvpn ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/openvpn http://ftp.the-construct.com/files/${KERNEL_VERSION}/openvpn
fi

# make them executable
chmod +x /var/tmp/openvpn
chmod 0600 /var/tmp/server.ovpn
chmod 0600 /var/tmp/secret.key

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn

# make FBF accessable from the internet (192.168.178.253)
sleep 10
ifconfig eth0:1 192.168.178.253 netmask 255.255.255.0 broadcast 192.168.178.255 up

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}

EOF

# write debug.cfg
cat /var/tmp/debug.cfg > /var/flash/debug.cfg

# delete /var/tmp/debug.cfg
rm /var/tmp/debug.cfg


# reboot
exit $INSTALL_SUCCESS_REBOOT

# (c) 2006 Andreas Baginski
 choose any two files you want to compare, NoteTab will offer the current document Ó½

Kann ich die nicht der FB irgendwie anders unterschieben als über das normale Firmwareupdate? Vieleicht liegt es ja daran das es nicht funktioniert??!!

Bye

MaxMuster · 21 Mrz 2008

Teste doch erstmal, was in deiner debug.cfg nun wirklich drinsteht:

Code:

cat /var/flash/debug.cfg

Der Inhalt sollte dem Part aus dem Install ab dem "cat > /var/tmp/debug.cfg << 'EOF'" bis for dem "EOF" entsprechen.

Wenn das nicht so ist, kannst du das natürlich auch anders in die Box bekommen, z.B. so:

Du "bildest das install nach", indem du in einem Telnet-Fenster die Befehle aus dem Install ab

Code:

cat > /var/tmp/debug.cfg << 'EOF'
#!/bin/sh
....

bis zu

Code:

# write debug.cfg
cat /var/tmp/debug.cfg > /var/flash/debug.cfg

in eine Telnet-Shell hineinkopierst, ggf in "Portionen".

Danach sollte ein "cat /var/flash/debug.cfg" den oben beschriebenen Inhalt haben.

Jörg

Hasenmelker · 21 Mrz 2008

MaxMuster schrieb:
Teste doch erstmal, was in deiner debug.cfg nun wirklich drinsteht:

Code:

cat /var/flash/debug.cfg

Der Inhalt sollte dem Part aus dem Install ab dem "cat > /var/tmp/debug.cfg << 'EOF'" bis for dem "EOF" entsprechen.

Jörg

Das habe ich heute morgen schnell getestet. Die Datei wird nicht gefunden. Somit nicht vorhanden/ installiert worden.

Den Rest werde ich dann mal morgen früh nach meinem Dienst testen. Hoffe das es dann klappt.

Ich möchte mich nochmals für Deine Hilfe bedanken! Ist nicht selbstverständlich das sich jemand so aufopfert!!!! 1000 Dank!!!!

Bye

Hasenmelker · 22 Mrz 2008

Hallo,

so ich denke nun das ich die default.cfg in der FB habe:

Code:

ps
  PID  Uid     VmSize Stat Command
    1 root        336 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    6 root            SW< [kblockd/0]
   23 root            SW< [pdflush]
   24 root            SW< [pdflush]
   26 root            SW< [aio/0]
   25 root            SW  [kswapd0]
   62 root            SW  [pm_info]
   70 root            SW  [mtdblockd]
   96 root            SW  [tffsd_mtd_0]
   98 root        336 S   init
   99 root        448 S   /bin/sh /etc/init.d/rc.S
  335 root        292 S   cat /dev/debug
  340 root            SW< [capi_oslib]
  341 root            SW< [capi_oslib]
  342 root            SW  [ubik2_tx[8]]
  343 root            SW  [capitransp]
  388 root            Z N [ctlmgr]
  389 root       1964 S N ctlmgr
  411 root        472 S   wpa_authenticator
  423 root            Z   [usermand]
  424 root        980 S   usermand
  433 root            Z   [websrv]
  434 root       1036 S N websrv
  438 root            Z   [igdd]
  439 root       1368 S   igdd
  441 root       1036 S N websrv
  442 root       1036 S N websrv
  443 root       1036 S N websrv
  447 root            Z   [multid]
  448 root       1288 S   multid
  455 root            Z   [dsld]
  456 root       1264 S   dsld -i -n
  469 root            Z   [telnetd]
  470 root        900 S   telefon a127.0.0.1
  474 root            Z   [telnetd]
  475 root        304 S   telnetd -l /sbin/ar7login
  476 root            Z   [voipd]
  477 root       1560 S < voipd
  486 root        432 S   -sh
  487 root        192 S   /bin/run_clock -c /dev/tffs -d
  497 root        624 S   capiotcp_server -p5031 -m1
  498 root       1368 S   igdd
  499 root       1368 S   igdd
  500 root       1368 S   igdd
  591 root            RWN [kdsld_token]
  606 root        732 S   /var/tmp/openvpn --config /var/tmp/server.ovpn
  620 root        360 R   ps
# ps
  PID  Uid     VmSize Stat Command
    1 root        336 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    6 root            SW< [kblockd/0]
   23 root            SW< [pdflush]
   24 root            SW< [pdflush]
   26 root            SW< [aio/0]
   25 root            SW  [kswapd0]
   62 root            SW  [pm_info]
   70 root            SW  [mtdblockd]
   96 root            SW  [tffsd_mtd_0]
   98 root        336 S   init
   99 root        448 S   /bin/sh /etc/init.d/rc.S
  335 root        292 S   cat /dev/debug
  340 root            SW< [capi_oslib]
  341 root            SW< [capi_oslib]
  342 root            SW  [ubik2_tx[8]]
  343 root            SW  [capitransp]
  388 root            Z N [ctlmgr]
  389 root       1964 S N ctlmgr
  411 root        472 S   wpa_authenticator
  423 root            Z   [usermand]
  424 root        980 S   usermand
  433 root            Z   [websrv]
  434 root       1036 S N websrv
  438 root            Z   [igdd]
  439 root       1352 S   igdd
  441 root       1036 S N websrv
  442 root       1036 S N websrv
  443 root       1036 S N websrv
  447 root            Z   [multid]
  448 root       1288 S   multid
  455 root            Z   [dsld]
  456 root       1264 S   dsld -i -n
  469 root            Z   [telnetd]
  470 root        900 S   telefon a127.0.0.1
  474 root            Z   [telnetd]
  475 root        304 S   telnetd -l /sbin/ar7login
  476 root            Z   [voipd]
  477 root       1560 S < voipd
  486 root        432 S   -sh
  487 root        192 S   /bin/run_clock -c /dev/tffs -d
  497 root        624 S   capiotcp_server -p5031 -m1
  498 root       1352 S   igdd
  499 root       1352 S   igdd
  500 root       1352 S   igdd
  591 root            RWN [kdsld_token]
  606 root        732 S   /var/tmp/openvpn --config /var/tmp/server.ovpn
  621 root        360 R   ps
#

Habe sie manuell rübergeschoben:

Code:

# cat /var/flash/debug.cfg
#!/bin/sh

LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 120

# load VPN-Server (OpenVPN)

# create tun-device
mknod /var/tmp/tun c 10 200

# write 'secret.key' to file
cat > /var/tmp/secret.key << 'ENDSECRETKEY'
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
schnippschnapp
-----END OpenVPN Static key V1-----

ENDSECRETKEY

# write 'server.ovpn' to file
cat > /var/tmp/server.ovpn << 'ENDSERVERCONF'
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key
ENDSERVERCONF

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/openvpn ]
  then
    echo "copy ${f}/files/${KERNEL_VERSION}/openvpn"
    cp ${f}/files/${KERNEL_VERSION}/openvpn /var/tmp/openvpn
  fi
done
# check if file already exists
if [ ! -f /var/tmp/openvpn ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/openvpn http://ftp.the-construct.com/files/${KERNEL_VERSION}
/openvpn
fi

# make them executable
chmod +x /var/tmp/openvpn
chmod 0600 /var/tmp/server.ovpn
chmod 0600 /var/tmp/secret.key

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn

# make FBF accessable from the internet (192.168.178.253)
sleep 10
ifconfig eth0:1 192.168.178.253 netmask 255.255.255.0 broadcast 192.168.178.255
up

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}
#

Trotz alle dem kann ich kein ping an 10.8.0.1 senden/ es kommt nicht an.
Habe mal den Server versuct manuell zu starten, kann aber nicht viel mit dem Text anfangen:

Code:

# cd /var/tmp
./openvpn#  --config ./server.ovpn
Sat Mar 22 16:52:14 2008 OpenVPN 2.1_rc1 mipsel-linux [SSL] [LZO2] [EPOLL] built
 on Jan  5 2007
Sat Mar 22 16:52:14 2008 IMPORTANT: OpenVPN's default port number is now 1194, b
ased on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earl
ier used 5000 as the default port.
Sat Mar 22 16:52:14 2008 TCP/UDP: Socket bind failed on local address [undef]:11
94: Address already in use
Sat Mar 22 16:52:14 2008 Exiting
#

Hier nochmals der Log com VPN-Clienten:

Code:

Sat Mar 22 16:34:57 2008 us=992000 Current Parameter Settings:
Sat Mar 22 16:34:57 2008 us=992000   config = 'client.ovpn'
Sat Mar 22 16:34:57 2008 us=992000   mode = 0
Sat Mar 22 16:34:57 2008 us=992000   show_ciphers = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   show_digests = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   show_engines = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   genkey = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   key_pass_file = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   show_tls_ciphers = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   proto = 0
Sat Mar 22 16:34:57 2008 us=992000   local = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   remote_list[0] = {'edit.dyndns.info', 1194}
Sat Mar 22 16:34:57 2008 us=992000   remote_random = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   local_port = 1194
Sat Mar 22 16:34:57 2008 us=992000   remote_port = 1194
Sat Mar 22 16:34:57 2008 us=992000   remote_float = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   ipchange = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   bind_defined = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   bind_local = ENABLED
Sat Mar 22 16:34:57 2008 us=992000   dev = 'tun'
Sat Mar 22 16:34:57 2008 us=992000   dev_type = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   dev_node = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   lladdr = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   topology = 1
Sat Mar 22 16:34:57 2008 us=992000   tun_ipv6 = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   ifconfig_local = '10.8.0.2'
Sat Mar 22 16:34:57 2008 us=992000   ifconfig_remote_netmask = '10.8.0.1'
Sat Mar 22 16:34:57 2008 us=992000   ifconfig_noexec = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   ifconfig_nowarn = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   shaper = 0
Sat Mar 22 16:34:57 2008 us=992000   tun_mtu = 1500
Sat Mar 22 16:34:57 2008 us=992000   tun_mtu_defined = ENABLED
Sat Mar 22 16:34:57 2008 us=992000   link_mtu = 1500
Sat Mar 22 16:34:57 2008 us=992000   link_mtu_defined = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   tun_mtu_extra = 0
Sat Mar 22 16:34:57 2008 us=992000   tun_mtu_extra_defined = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   fragment = 0
Sat Mar 22 16:34:57 2008 us=992000   mtu_discover_type = -1
Sat Mar 22 16:34:57 2008 us=992000   mtu_test = 0
Sat Mar 22 16:34:57 2008 us=992000   mlock = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   keepalive_ping = 0
Sat Mar 22 16:34:57 2008 us=992000   keepalive_timeout = 0
Sat Mar 22 16:34:57 2008 us=992000   inactivity_timeout = 0
Sat Mar 22 16:34:57 2008 us=992000   ping_send_timeout = 0
Sat Mar 22 16:34:57 2008 us=992000   ping_rec_timeout = 0
Sat Mar 22 16:34:57 2008 us=992000   ping_rec_timeout_action = 0
Sat Mar 22 16:34:57 2008 us=992000   ping_timer_remote = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   remap_sigusr1 = 0
Sat Mar 22 16:34:57 2008 us=992000   explicit_exit_notification = 0
Sat Mar 22 16:34:57 2008 us=992000   persist_tun = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   persist_local_ip = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   persist_remote_ip = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   persist_key = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   mssfix = 1450
Sat Mar 22 16:34:57 2008 us=992000   resolve_retry_seconds = 1000000000
Sat Mar 22 16:34:57 2008 us=992000   connect_retry_seconds = 5
Sat Mar 22 16:34:57 2008 us=992000   connect_timeout = 10
Sat Mar 22 16:34:57 2008 us=992000   connect_retry_max = 0
Sat Mar 22 16:34:57 2008 us=992000   username = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   groupname = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   chroot_dir = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   cd_dir = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   writepid = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   up_script = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   down_script = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   down_pre = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   up_restart = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   up_delay = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   daemon = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   inetd = 0
Sat Mar 22 16:34:57 2008 us=992000   log = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   suppress_timestamps = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   nice = 0
Sat Mar 22 16:34:57 2008 us=992000   verbosity = 6
Sat Mar 22 16:34:57 2008 us=992000   mute = 0
Sat Mar 22 16:34:57 2008 us=992000   gremlin = 0
Sat Mar 22 16:34:57 2008 us=992000   status_file = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   status_file_version = 1
Sat Mar 22 16:34:57 2008 us=992000   status_file_update_freq = 60
Sat Mar 22 16:34:57 2008 us=992000   occ = ENABLED
Sat Mar 22 16:34:57 2008 us=992000   rcvbuf = 0
Sat Mar 22 16:34:57 2008 us=992000   sndbuf = 0
Sat Mar 22 16:34:57 2008 us=992000   sockflags = 0
Sat Mar 22 16:34:57 2008 us=992000   socks_proxy_server = '[UNDEF]'
Sat Mar 22 16:34:57 2008 us=992000   socks_proxy_port = 0
Sat Mar 22 16:34:57 2008 us=992000   socks_proxy_retry = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   fast_io = DISABLED
Sat Mar 22 16:34:57 2008 us=992000   lzo = 0
Sat Mar 22 16:34:58 2008 us=32000   route_script = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=32000   route_default_gateway = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=32000   route_default_metric = 0
Sat Mar 22 16:34:58 2008 us=32000   route_noexec = DISABLED
Sat Mar 22 16:34:58 2008 us=32000   route_delay = 5
Sat Mar 22 16:34:58 2008 us=32000   route_delay_window = 30
Sat Mar 22 16:34:58 2008 us=32000   route_delay_defined = ENABLED
Sat Mar 22 16:34:58 2008 us=32000   route_nopull = DISABLED
Sat Mar 22 16:34:58 2008 us=32000   management_addr = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=32000   management_port = 0
Sat Mar 22 16:34:58 2008 us=32000   management_user_pass = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=32000   management_log_history_cache = 250
Sat Mar 22 16:34:58 2008 us=32000   management_echo_buffer_size = 100
Sat Mar 22 16:34:58 2008 us=32000   management_query_passwords = DISABLED
Sat Mar 22 16:34:58 2008 us=32000   management_hold = DISABLED
Sat Mar 22 16:34:58 2008 us=72000   management_client = DISABLED
Sat Mar 22 16:34:58 2008 us=72000   management_signal = DISABLED
Sat Mar 22 16:34:58 2008 us=72000   management_forget_disconnect = DISABLED
Sat Mar 22 16:34:58 2008 us=72000   management_write_peer_info_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=72000   shared_secret_file = 'e:\programme\openvpn\key.key'
Sat Mar 22 16:34:58 2008 us=72000   key_direction = 0
Sat Mar 22 16:34:58 2008 us=72000   ciphername_defined = ENABLED
Sat Mar 22 16:34:58 2008 us=72000   ciphername = 'BF-CBC'
Sat Mar 22 16:34:58 2008 us=72000   authname_defined = ENABLED
Sat Mar 22 16:34:58 2008 us=72000   authname = 'SHA1'
Sat Mar 22 16:34:58 2008 us=72000   keysize = 0
Sat Mar 22 16:34:58 2008 us=72000   engine = DISABLED
Sat Mar 22 16:34:58 2008 us=72000   replay = ENABLED
Sat Mar 22 16:34:58 2008 us=72000   mute_replay_warnings = DISABLED
Sat Mar 22 16:34:58 2008 us=72000   replay_window = 64
Sat Mar 22 16:34:58 2008 us=72000   replay_time = 15
Sat Mar 22 16:34:58 2008 us=92000   packet_id_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   use_iv = ENABLED
Sat Mar 22 16:34:58 2008 us=92000   test_crypto = DISABLED
Sat Mar 22 16:34:58 2008 us=92000   tls_server = DISABLED
Sat Mar 22 16:34:58 2008 us=92000   tls_client = DISABLED
Sat Mar 22 16:34:58 2008 us=92000   key_method = 2
Sat Mar 22 16:34:58 2008 us=92000   ca_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   ca_path = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   dh_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   cert_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   priv_key_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   pkcs12_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   cryptoapi_cert = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   cipher_list = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   tls_verify = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=92000   tls_remote = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=132000   crl_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=132000   ns_cert_type = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=132000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=172000   remote_cert_ku[i] = 0
Sat Mar 22 16:34:58 2008 us=172000   remote_cert_eku = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=172000   tls_timeout = 2
Sat Mar 22 16:34:58 2008 us=172000   renegotiate_bytes = 0
Sat Mar 22 16:34:58 2008 us=172000   renegotiate_packets = 0
Sat Mar 22 16:34:58 2008 us=172000   renegotiate_seconds = 3600
Sat Mar 22 16:34:58 2008 us=172000   handshake_window = 60
Sat Mar 22 16:34:58 2008 us=172000   transition_window = 3600
Sat Mar 22 16:34:58 2008 us=172000   single_session = DISABLED
Sat Mar 22 16:34:58 2008 us=172000   tls_exit = DISABLED
Sat Mar 22 16:34:58 2008 us=172000   tls_auth_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=172000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=172000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=172000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=172000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=212000   pkcs11_protected_authentication = DISABLED
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=252000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_private_mode = 00000000
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=272000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=312000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=312000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=312000   pkcs11_cert_private = DISABLED
Sat Mar 22 16:34:58 2008 us=312000   pkcs11_pin_cache_period = -1
Sat Mar 22 16:34:58 2008 us=312000   pkcs11_id = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=312000   server_network = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   server_netmask = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   server_bridge_ip = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   server_bridge_netmask = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   server_bridge_pool_start = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   server_bridge_pool_end = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   ifconfig_pool_defined = DISABLED
Sat Mar 22 16:34:58 2008 us=312000   ifconfig_pool_start = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   ifconfig_pool_end = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=312000   ifconfig_pool_netmask = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=352000   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=352000   ifconfig_pool_persist_refresh_freq = 600
Sat Mar 22 16:34:58 2008 us=352000   n_bcast_buf = 256
Sat Mar 22 16:34:58 2008 us=352000   tcp_queue_limit = 64
Sat Mar 22 16:34:58 2008 us=352000   real_hash_size = 256
Sat Mar 22 16:34:58 2008 us=352000   virtual_hash_size = 256
Sat Mar 22 16:34:58 2008 us=352000   client_connect_script = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=352000   learn_address_script = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=352000   client_disconnect_script = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=352000   client_config_dir = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=352000   ccd_exclusive = DISABLED
Sat Mar 22 16:34:58 2008 us=352000   tmp_dir = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=352000   push_ifconfig_defined = DISABLED
Sat Mar 22 16:34:58 2008 us=352000   push_ifconfig_local = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=352000   push_ifconfig_remote_netmask = 0.0.0.0
Sat Mar 22 16:34:58 2008 us=372000   enable_c2c = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   duplicate_cn = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   cf_max = 0
Sat Mar 22 16:34:58 2008 us=372000   cf_per = 0
Sat Mar 22 16:34:58 2008 us=372000   max_clients = 1024
Sat Mar 22 16:34:58 2008 us=372000   max_routes_per_client = 256
Sat Mar 22 16:34:58 2008 us=372000   client_cert_not_required = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   username_as_common_name = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   auth_user_pass_verify_script = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=372000   auth_user_pass_verify_script_via_file = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   client = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   pull = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   auth_user_pass_file = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=372000   show_net_up = DISABLED
Sat Mar 22 16:34:58 2008 us=372000   route_method = 0
Sat Mar 22 16:34:58 2008 us=412000   ip_win32_defined = DISABLED
Sat Mar 22 16:34:58 2008 us=412000   ip_win32_type = 3
Sat Mar 22 16:34:58 2008 us=412000   dhcp_masq_offset = 0
Sat Mar 22 16:34:58 2008 us=412000   dhcp_lease_time = 31536000
Sat Mar 22 16:34:58 2008 us=412000   tap_sleep = 0
Sat Mar 22 16:34:58 2008 us=412000   dhcp_options = DISABLED
Sat Mar 22 16:34:58 2008 us=412000   dhcp_renew = DISABLED
Sat Mar 22 16:34:58 2008 us=412000   dhcp_pre_release = DISABLED
Sat Mar 22 16:34:58 2008 us=412000   dhcp_release = DISABLED
Sat Mar 22 16:34:58 2008 us=412000   domain = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=412000   netbios_scope = '[UNDEF]'
Sat Mar 22 16:34:58 2008 us=412000   netbios_node_type = 0
Sat Mar 22 16:34:58 2008 us=412000   disable_nbt = DISABLED
Sat Mar 22 16:34:58 2008 us=412000 OpenVPN 2.1_rc7 Win32-MinGW [SSL] [LZO2] [PKCS11] built on Jan 29 2008
Sat Mar 22 16:34:58 2008 us=412000 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sat Mar 22 16:34:58 2008 us=452000 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Mar 22 16:34:58 2008 us=452000 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 22 16:34:58 2008 us=452000 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Mar 22 16:34:58 2008 us=452000 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 22 16:34:58 2008 us=953000 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{83698A28-A87F-4A38-86C3-C23ACE6A56EC}.tap
Sat Mar 22 16:34:59 2008 us=3000 TAP-Win32 Driver Version 9.4 
Sat Mar 22 16:34:59 2008 us=3000 TAP-Win32 MTU=1500
Sat Mar 22 16:34:59 2008 us=173000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {83698A28-A87F-4A38-86C3-C23ACE6A56EC} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Sat Mar 22 16:34:59 2008 us=213000 Successful ARP Flush on interface [4] {83698A28-A87F-4A38-86C3-C23ACE6A56EC}
Sat Mar 22 16:34:59 2008 us=614000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Sat Mar 22 16:34:59 2008 us=614000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Mar 22 16:34:59 2008 us=614000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sat Mar 22 16:34:59 2008 us=614000 Local Options hash (VER=V4): 'd3880969'
Sat Mar 22 16:34:59 2008 us=614000 Expected Remote Options hash (VER=V4): 'c41bf3b8'
Sat Mar 22 16:34:59 2008 us=614000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Mar 22 16:34:59 2008 us=614000 UDPv4 link local (bound): [undef]:1194
Sat Mar 22 16:34:59 2008 us=614000 UDPv4 link remote: 80.128.97.234:1194
Sat Mar 22 16:35:09 2008 us=548000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:35:19 2008 us=242000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:35:23 2008 us=568000 TUN READ [60]
Sat Mar 22 16:35:23 2008 us=568000 UDPv4 WRITE [100] to 80.128.97.234:1194:  DATA len=100
Sat Mar 22 16:35:28 2008 us=956000 TUN READ [60]
Sat Mar 22 16:35:28 2008 us=956000 UDPv4 WRITE [100] to 80.128.97.234:1194:  DATA len=100
Sat Mar 22 16:35:29 2008 us=978000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:35:33 2008 us=963000 TUN READ [60]
Sat Mar 22 16:35:33 2008 us=963000 UDPv4 WRITE [100] to 80.128.97.234:1194:  DATA len=100
Sat Mar 22 16:35:38 2008 us=971000 TUN READ [60]
Sat Mar 22 16:35:38 2008 us=971000 UDPv4 WRITE [100] to 80.128.97.234:1194:  DATA len=100
Sat Mar 22 16:35:40 2008 us=2000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:35:50 2008 us=117000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:36:00 2008 us=31000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:36:10 2008 us=746000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:36:20 2008 us=360000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:36:30 2008 us=985000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:36:41 2008 us=160000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:36:51 2008 us=164000 UDPv4 WRITE [60] to 80.128.97.234:1194:  DATA len=60
Sat Mar 22 16:37:01 2008 us=529000 NOTE: failed to obtain options consistency info from peer -- this could occur if the remote peer is running a version of OpenVPN before 1.5-beta8 or if there is a network connectivity problem, and will not necessarily prevent OpenVPN from running (0 bytes received from peer, 0 bytes authenticated data channel traffic) -- you can disable the options consistency check with --disable-occ.
Sat Mar 22 16:40:27 2008 us=806000 TCP/UDP: Closing socket
Sat Mar 22 16:40:27 2008 us=806000 Closing TUN/TAP interface
Sat Mar 22 16:40:27 2008 us=816000 SIGTERM[hard,] received, process exiting

MaxMuster · 22 Mrz 2008

Hi,

so, das sieht doch schon etwas besser aus. Dass der Server nicht nochmal zu starten ist, ist o.k., weil er schonmal läuft (und der zweite ebenfalls den Port 1194 nutzen will).

Eine "Macke" hatte ich noch eingebaut: Die Server-Config sollte noch ein "daemon" haben, oder mittels "&" im Hintergrund gestartet werden, also so:

Code:

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn [B]&[/B]

Du könntest mal das Log des Servers anschauen, indem du den laufenden Prozess abbrichst und einen neuen startest:

Code:

killall openvpn
/var/tmp/openvpn --config /var/tmp/server.ovpn

Jörg

Hasenmelker · 22 Mrz 2008

Hallo...

das liest sich ganz gut!!
Wie kann ich das Log auslesen? Oder meinste das hier:

Code:

# # start OpenVPN
/var/tmp/# openvpn --config /var/tmp/server.ovpn &
# Sat Mar 22 17:25:51 2008 OpenVPN 2.1_rc1 mipsel-linux [SSL] [LZO2] [EPOLL] bui
lt on Jan  5 2007
Sat Mar 22 17:25:51 2008 IMPORTANT: OpenVPN's default port number is now 1194, b
ased on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earl
ier used 5000 as the default port.
Sat Mar 22 17:25:51 2008 TUN/TAP device tun0 opened
Sat Mar 22 17:25:51 2008 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1
500
Sat Mar 22 17:25:51 2008 UDPv4 link local (bound): [undef]:1194
Sat Mar 22 17:25:51 2008 UDPv4 link remote: [undef]
Sat Mar 22 17:27:46 2008 Peer Connection Initiated with 80.128.121.253:61015
Sat Mar 22 17:27:46 2008 Initialization Sequence Completed
Sat Mar 22 17:27:46 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:27:56 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:27:56 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:05 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:07 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:10 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:15 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:17 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:20 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:27 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:37 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:48 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sat Mar 22 17:28:58 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)

Bye

MaxMuster · 22 Mrz 2008

Ja, das meinte ich, das ist das Server-Log.

[noparse]"read UDPv4 [EHOSTUNREACH]: No route to host (code=148)"[/noparse], das hatte ich doch schonmal...

Ist eine Firewall auf dem Client?
Nimm zudem mal noch eine Zeile "nobind" in die Client-Config mit auf. Ändert sich dann was?

Hast du die Portweiterleitung über die GUI gemacht?

Jörg

Hasenmelker · 22 Mrz 2008

Portweiterleitung: Habe ich UDP 1142 an 192.168.178.253.

Mal ne frage zwischendurch. Muss der normale IP Bereich der Fritzbox im 192.168.178.1 sein? Oder kann es auch ein anderer sein? Wegen der 192.168.178.253?? Mein normaler Bereich ist nämlich 192.168.36.1.

nobind:

MaxMuster · 22 Mrz 2008

... der Bereioch ist egal, am besten sollte er dem "normalen" LAN entsprechen, um Routingproblemen zu begegnen. Du kannst die "virtuelle IP" in der Ddebug.cfg natürlich auch entsprechend ändern (und dann natürlich die Portweiterleitung anpassen).

Wenn du dich etwas mit dem gewöhnungsbedürftigen Editor "vi" auskennst, kannst du das auch direkt auf der Box machen:

Code:

cat /var/flash/debug.cfg > /var/tmp/debug.cfg
vi /var/tmp/debug.cfg
# jetzt Datei nach belieben verändern

# dann zurücksichern:
cat /var/tmp/debug.cfg > /var/flash/debug.cfg

Jörg

Hasenmelker · 22 Mrz 2008

Hallo...

werde mich morgen damit beschäftigen. Jetzt geht erstmalm aufs Osterfeuer.

Bye

MaxMuster · 22 Mrz 2008

... viel Spass und Frohe Ostern!

Jörg

stephan_bauer · 22 Mrz 2008

Hallo Hasenmelker,

mit ein paar Änderungen habe ich die Anleitung von Tecchannel zum Laufen gebracht.
Meine Änderungen hatte ich in den Kommentaren beschrieben:
http://www.tecchannel.de/forum/kommentare/4191-vpn-sichere-netzwerkkopplung-fritz-box-2.html#post24234
Vielleicht hilfts ja.

Grüße

Stephan

Hasenmelker · 23 Mrz 2008

MaxMuster schrieb:

Code:

cat /var/flash/debug.cfg > /var/tmp/debug.cfg
vi /var/tmp/debug.cfg
# jetzt Datei nach belieben verändern

# dann zurücksichern:
cat /var/tmp/debug.cfg > /var/flash/debug.cfg

Jörg

Guten morgen und frohe Ostern zurück!

Das mit dem "Vi" klappt nicht-->vi: applet not found???
Bin doch der Meinung das vi drauf sein sollte?! Oder muss ich das nachinstallieren?

CU

OpenVPN + FB7050 als Server?

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

Neuer User

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

IPPF-Promi

Neuer User

Neuer User

Kategorien

Wissenswertes

Statistik des Forums

3CX jetzt einen Monat kostenlos testen

Unternehmen

Lösungen

Nützliche Links

Mehr erfahren