OpenVPN + FB7050 als Server?

... ich dachte, das wäre immer mit dabei, aber wohl falsch gedacht...

Du kannst dann entweder das mit dem "install simulieren" um die debug.cfg zu Schreiben mit den geänderten Daten machen, oder auch, wenn du noch nicht müde vom experimentieren bist ;-) zusätzlich eine debug.cfg mit "SSH-Server" (dropbear) auf deine Box bringen.
Dazu gibt es mit "winscp" ein schönes Tool, mit dem du u.a. auch Dateien auf der Box editieren kannst....

Ich würde als erstes mal den Server nochmal direkt starten und das "nobind" beim Client versuchen.

Jörg
 
Hallo...

habe mal versucht Dropbear manuell draufzuschieben. Kann aber nicht per "vi" oder "WinSCP" zugreifen.

Hier mal die debug.cfg:

Code:
LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 120

# load VPN-Server (OpenVPN)

# create tun-device
mknod /var/tmp/tun c 10 200

# write 'secret.key' to file
cat > /var/tmp/secret.key << 'ENDSECRETKEY'
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----

ENDSECRETKEY

# write 'server.ovpn' to file
cat > /var/tmp/server.ovpn << 'ENDSERVERCONF'
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key
ENDSERVERCONF

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/openvpn ]
  then
    echo "copy ${f}/files/${KERNEL_VERSION}/openvpn"
    cp ${f}/files/${KERNEL_VERSION}/openvpn /var/tmp/openvpn
  fi
done
# check if file already exists
if [ ! -f /var/tmp/openvpn ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/openvpn http://ftp.the-construct.com/files/${KERNEL_VERSION}
/openvpn
fi

# make them executable
chmod +x /var/tmp/openvpn
chmod 0600 /var/tmp/server.ovpn
chmod 0600 /var/tmp/secret.key

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn

# make FBF accessable from the internet (192.168.178.253)
sleep 10
ifconfig eth0:1 192.168.178.253 netmask 255.255.255.0 broadcast 192.168.178.255
up

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}

LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 120

# load SSH-Server (dropbear) and etherwake

# CONFIGURATION

# SSH
# port
dropbearport="22"
# password
PASSWD='edit'

# Etherwake
# MAC address
wolmac="01:23:45:67:89:AB"
# interface to use for WOL
# intf = std  - ata
# eth0 = LAN1 - WAN
# eth1 = LAN2 - LAN1
wolinterface="eth0"

# CONFIGURATION END

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/dropbear ]
  then
    echo "${f}/files/${KERNEL_VERSION}/dropbear"
    cp ${f}/files/${KERNEL_VERSION}/dropbear /var/tmp/dropbear
  fi
done
# check if file already exists
if [ ! -f /var/tmp/dropbear ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/dropbear http://ftp.the-construct.com/files/${KERNEL_VERSION
}/dropbear
fi

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/busybox ]
  then
    echo "${f}/files/${KERNEL_VERSION}/busybox"
    cp ${f}/files/${KERNEL_VERSION}/busybox /var/tmp/busybox
  fi
done
# check if file already exists
if [ ! -f /var/tmp/busybox ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/busybox http://ftp.the-construct.com/files/${KERNEL_VERSION}
/busybox
fi

# make them executable
chmod +x /var/tmp/busybox
chmod +x /var/tmp/dropbear

# set busybox var
BUSYBOX="/var/tmp/busybox"

# change root password
${BUSYBOX} sed -e "/root:/s#^root:[^:]*:#root:${PASSWD}:#" -i /var/tmp/shadow

# create symlink for dropbearkey
ln -s /var/tmp/dropbear dropbearkey

${BUSYBOX} uudecode -o /var/tmp/dropbear_rsa_host_key << 'RSA'
begin 600 /var/tmp/dropbear_rsa_host_key
M````!W-S:"UR<V$````#`0`!````@P"3.%"(E\TH70DE87=VGD;U*)801QI@
MH[]ECY!M(`;LWT9=&P<B4XN."$&O(7Y>\L%$?L@QXIM(I(>QPQ?JS%D@(7I,
M)8??=.%LI"L`V+WO&("P`V.;:8+-^WZXR`9@_F>1D\@/DM'ADVR/AW0QYV/G
M1U#JB:YI&5W?SS"LUM)&P!A-````@@;);9,"=H."&'H7[F\R.$"TC(AW$JSZ
M5X@YT%5KB,XR,];V>$-YF0$D^<PV3=)8/!<IAA:@I/IZ%4198UB@;XIFUI!2
M^OZD9*<]VP=&ZAQFG+($.1/,Y>FGZA53F-/:\N&'>O`+]T7+-;$4$&'T'+$.
M)@/3J35W^G2R\S/U-V:4Q:$```!"`./O%%F&<UD+5AK%^B46<.W,?2.7Y%_3
MU"U6,:?D?X0/2;GZD$4#^U;KSA:`.;YE!Y'#:/5:4R?`M1VJR-2Z_KMA````
M0@"E6/F9)+;%Y_=A,](`HXSE6"J?V$[I&8_63YSQJ_R!NI!8#4/:.>0B/8D2
61[+C/F\%EN`\Z:4Q;,GWI:.)`SQ0;0``
`
end

RSA

${BUSYBOX} uudecode -o /var/tmp/dropbear_dss_host_key << 'DSS'
begin 600 /var/tmp/dropbear_dss_host_key
M````!W-S:"UD<W,```"!`,8-;:V<]>ADNG<"<!SZ8.J;YI#@3C?*+UWY&Y6&
MC/A6?;D;/F0.>;X\X'Y!4LS1<?3!4.FE3O_@]ARU6/@8+91',_H"=YKRK51\
MM\'Q;IR;%@)%)?7UZ`,MQE/@$[N)=,P1`D#PDFPY-F`A7`H:5`PZ]V1U&&(7
MO-1"MG6RH+'G````%0#86%/T9PQ59U(HHPH!R>)ZO&&KT0```(!R+\PG\`9!
M+/&#@&)QB8(A62)(-Q39["TOX?SE\\B`?YJD^4JQ9BMVC,-P<N[G!IO>6<[(
MH/*JAX9-:&1%QU2BCQEUXE[BI-H]Q=N\/_-D^N_H'#'LM2$24W`,^%[T<GW-
M-ZXK>O(ACG:;F.HN?>7V$GRQE4G.\0U>6>#<OC>`F@```($`@)Z&9'G';QWA
M0>A1K"E,6C(,'7?2(4R>UR,&/==\8Y<P#:16E>ZN8&"DU@?\H"5PN]7<PV#'
MB7%31;\7>*Z][AHH+6XQI!/F,*Z`_5`'_KZYO>?*#TIRLB6X^M)?P,8R`7?%
M#.>7V?B>;M5C1D`$B<SP(=;.;$7/_'2=`;GTEUP````4`2BU?>H+P_R(^$+V
(:27%<(A.$<,`
`
end

DSS

# start dropbear
sleep 60
/var/tmp/dropbear -p ${dropbearport} -r /var/tmp/dropbear_rsa_host_key -d /var/t
mp/dropbear_dss_host_key

# create simplified WOL script
echo "${BUSYBOX} ${ETHERWAKE} -i ${wolinterface} ${wolmac}" > /var/tmp/startpc

# make it executable
chmod +x /var/tmp/startpc

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}
eof

Bye
 
Läuft denn der dropbear Dienst (Prüfen mit "ps")?

Jörg

EDIT: Vermutlich wird Dienst der nicht gestartet, weil beim Openvpn das "daemon" in der Server-Config bzw. das "&" am Ende des Aufrufes, und die debug.cfg dann nicht weiter abgearbeitet wird...
 
Zuletzt bearbeitet:
Hallo...

im moment läuft das hier:

Code:
# ps
  PID  Uid     VmSize Stat Command
    1 root        336 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    6 root            SW< [kblockd/0]
   23 root            SW< [pdflush]
   24 root            SW< [pdflush]
   26 root            SW< [aio/0]
   25 root            SW  [kswapd0]
   62 root            SW  [pm_info]
   70 root            SW  [mtdblockd]
   96 root            SW  [tffsd_mtd_0]
  340 root            SW< [capi_oslib]
  341 root            SW< [capi_oslib]
  342 root            SW  [ubik2_tx[8]]
  343 root            SW  [capitransp]
  391 root       1860 S N ctlmgr
  411 root        472 S   wpa_authenticator
  425 root        948 S   usermand
  434 root        956 S N websrv
  439 root       1336 S   igdd
  441 root        956 S N websrv
  442 root        956 S N websrv
  443 root        956 S N websrv
  453 root       1288 S   multid
  456 root       1264 S   dsld -i -n
  470 root        900 S   telefon a127.0.0.1
  473 root        304 S   telnetd -l /sbin/ar7login
  476 root        432 S   -sh
  478 root       1560 S < voipd
  487 root        192 S   /bin/run_clock -c /dev/tffs -d
  492 root        624 S   capiotcp_server -p5031 -m1
  528 root       1336 S   igdd
  529 root       1336 S   igdd
  530 root       1336 S   igdd
  589 root            RWN [kdsld_token]
  621 root        336 S   init
  628 root        292 S   ./bftpd -d -c /var/tmp/bftpd.conf
  636 root        480 S   ./bftpd -d -c /var/tmp/bftpd.conf
  638 root        360 R   ps
#
Bye
 
... also weder openvpn noch dropbear. Sind die Dateien denn in /var/tmp ?
 
Hallo...

so jetzt habe ich die Datei erstmal wieder hergestellt. Ohne Dropbear. Dann startet der VPN-Server wenigstens.

Werde nun erstmal die IP Anpassen:

Alt:

Code:
# cat debug.cfg
#!/bin/sh

LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 120

# load VPN-Server (OpenVPN)

# create tun-device
mknod /var/tmp/tun c 10 200

# write 'secret.key' to file
cat > /var/tmp/secret.key << 'ENDSECRETKEY'
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----

ENDSECRETKEY

# write 'server.ovpn' to file
cat > /var/tmp/server.ovpn << 'ENDSERVERCONF'
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key
ENDSERVERCONF

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/openvpn ]
  then
    echo "copy ${f}/files/${KERNEL_VERSION}/openvpn"
    cp ${f}/files/${KERNEL_VERSION}/openvpn /var/tmp/openvpn
  fi
done
# check if file already exists
if [ ! -f /var/tmp/openvpn ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/openvpn http://ftp.the-construct.com/files/${KERNEL_VERSION}
/openvpn
fi

# make them executable
chmod +x /var/tmp/openvpn
chmod 0600 /var/tmp/server.ovpn
chmod 0600 /var/tmp/secret.key

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn

# make FBF accessable from the internet (192.168.178.253)
sleep 10
ifconfig eth0:1 192.168.178.253 netmask 255.255.255.0 broadcast 192.168.178.255
up

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}

Neu:
Code:
# cat debug.cfg
#!/bin/sh

LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 120

# load VPN-Server (OpenVPN)

# create tun-device
mknod /var/tmp/tun c 10 200

# write 'secret.key' to file
cat > /var/tmp/secret.key << 'ENDSECRETKEY'
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----

ENDSECRETKEY

# write 'server.ovpn' to file
cat > /var/tmp/server.ovpn << 'ENDSERVERCONF'
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key
ENDSERVERCONF

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/openvpn ]
  then
    echo "copy ${f}/files/${KERNEL_VERSION}/openvpn"
    cp ${f}/files/${KERNEL_VERSION}/openvpn /var/tmp/openvpn
  fi
done
# check if file already exists
if [ ! -f /var/tmp/openvpn ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/openvpn http://ftp.the-construct.com/files/${KERNEL_VERSION}
/openvpn
fi

# make them executable
chmod +x /var/tmp/openvpn
chmod 0600 /var/tmp/server.ovpn
chmod 0600 /var/tmp/secret.key

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn

# make FBF accessable from the internet (192.168.36.253)
sleep 10
ifconfig eth0:1 192.168.36.253 netmask 255.255.255.0 broadcast 192.168.36.255
up

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}

rüberschieben werde ich die Tabelle per Telenet. Das hat bisher immer geklappt. Ist zwar umständlich, geht aber wenigstens.
Dann noch den Port auf die andere IP freigeschaltet. Dann mal sehen.

Edit: Glaube mittlerweile das es nicht am VPN ansich, sondern wirklich an den Server/ Client.ovpn liegt.

Du hast ja geschrieben:
Als Einstieg ein einfaches Beispiel findet sich z.B. direkt bei openvpn.net als "mini-Example", was abgewandelt für die Box so aussähe:

Code:
server:
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key

Code:
client:
remote myremote.mydomain
dev tun
ifconfig 10.8.0.2 10.8.0.1
#route 192.168.178.0 255.255.255.0
secret static.key

Aber felht da nicht was? Wenn ich mir die jeweiligen Dateien von "the-Contruct so anschaue, steht da über das doppelte drinne...

Edit 2.: So nach einem Tag VPN werde ich schon langsam Gaga. Hatte zwar kurzzeitig eine Verbindung stehen, konnte sie aber nur einmal wieder aufbauen.
Dafür habe ich folgenden Log der Fritzbox über Telnet mitgeschnitten:

Code:
Sun Mar 23 19:56:42 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Mar 23 19:56:43 usermand[422]: 0.0.0.0:2435: connect to 192.168.36.22:14013 fail
ed - No route to host (148)
Sun Mar 23 19:56:53 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sun Mar 23 19:57:21 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sun Mar 23 19:58:44 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sun Mar 23 19:58:54 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
Sun Mar 23 19:59:04 2008 read UDPv4 [EHOSTUNREACH]: No route to host (code=148)
UND:
Code:
Jan  1 01:01:41 dsld[456]: internet: 192.168.178.253 not an intern host, forward
rule "udp 0.0.0.0:1194 192.168.178.253:1194 0 # HTTP-Server" ignored
Bye
 
Zuletzt bearbeitet:
So, bin nochmal kurz wieder da.

- Momentan (zumindest in deinen Beispielen/Logs) sind Portweiterleitung und Virtuelle IP unterschiedlich. Ist das so?!? ( 192.168.36.253 ./. 192.168.178.253 )
- Mach bitte in die Server-Config noch eine Zeile mit dem vergessenen "daemon" Befehl, das ist wirklich nötig (oder das "&" ans Ende der Zeile zum Starten des openvpn).

Jörg
 
Hallo Jörg

Habe vorhin den allerersten Zustand wieder hergestellt. Damit ich mich nicht verwurschtele. Also 192.168.178 usw. Portweiterleitung UDP an 1194 an 192.168.178.253

Daemon habe ich eingefügt. Test jetzt noch einmal schnell.

Bye Stefan
 
So hier jetzt die letzte debug.cfg:

Code:
cat > /var/tmp/debug.cfg << 'EOF'
#!/bin/sh

LED_DEVICE=/proc/led_mod/led
if [ ! -f /proc/led_mod/led  ] ; then
  LED_DEVICE=/var/led
  echo "set led: ${LED_DEVICE}"
fi
# start internet phone led flashing
echo "set internet phone led to blink (modul=14, state=3)"
echo 14,3 > ${LED_DEVICE}

# check kernel version
KERNEL_VERSION=`uname -r | grep 2.6`
if [ -z "${KERNEL_VERSION}" ]
then
  KERNEL_VERSION="linux24"
  ETHERWAKE="etherwake"
else
  KERNEL_VERSION="linux26"
  ETHERWAKE="ether-wake"
fi

# init busybox var
BUSYBOX="/bin/busybox"

# wait to be able to interrupt in case of emergency
sleep 75

# load VPN-Server (OpenVPN)

# create tun-device
mknod /var/tmp/tun c 10 200

# write 'secret.key' to file
cat > /var/tmp/secret.key << 'ENDSECRETKEY'
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
Edit
-----END OpenVPN Static key V1-----

ENDSECRETKEY

# write 'server.ovpn' to file
cat > /var/tmp/server.ovpn << 'ENDSERVERCONF'
dev tun
dev-node /var/tmp/tun
ifconfig 10.8.0.1 10.8.0.2
secret /var/tmp/secret.key
daemon
ENDSERVERCONF

# try to load files from USB drive
for f in /var/media/ftp/*
do
  if [ -f ${f}/files/${KERNEL_VERSION}/openvpn ]
  then
    echo "copy ${f}/files/${KERNEL_VERSION}/openvpn"
    cp ${f}/files/${KERNEL_VERSION}/openvpn /var/tmp/openvpn
  fi
done
# check if file already exists
if [ ! -f /var/tmp/openvpn ]
then
  # wait for server
  while !(ping -c 1 ftp.the-construct.com)
  do
    sleep 5
  done
  # load files
  wget -qO /var/tmp/openvpn http://ftp.the-construct.com/files/${KERNEL_VERSION}/openvpn
fi

# make them executable
chmod +x /var/tmp/openvpn
chmod 0600 /var/tmp/server.ovpn
chmod 0600 /var/tmp/secret.key

# start OpenVPN
/var/tmp/openvpn --config /var/tmp/server.ovpn

# make FBF accessable from the internet (192.168.178.253)
sleep 10
ifconfig eth0:1 192.168.178.253 netmask 255.255.255.0 broadcast 192.168.178.255 up

# stop internet phone led flashing
echo 14,1 > ${LED_DEVICE}

EOF

# write debug.cfg
cat /var/tmp/debug.cfg > /var/flash/debug.cfg

eigentlich finde ich die ganz "hübsch" ;-). Nur klappen tut es immer noch nicht.

Was mich da aber verwundert ist sind die IP´s in der Routingtabelle der FB:

Code:
route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.180.1   *               255.255.255.255 UH    2      0        0 dsl
10.8.0.2        *               255.255.255.255 UH    0      0        0 tun0
192.168.180.2   *               255.255.255.255 UH    2      0        0 dsl
192.168.178.0   *               255.255.255.0   U     0      0        0 eth0
192.168.36.0    *               255.255.255.0   U     0      0        0 lan
169.254.0.0     *               255.255.0.0     U     0      0        0 lan
default         *               0.0.0.0         U     2      0        0 dsl
#
 
Was sagt den ein "ps"? Läuft das VPN?

Jörg
 
ja läuft...
604 root 740 S /var/tmp/openvpn --config /var/tmp/server.ovpn
 
machst du bitte noch ein "ifconfig"?
 
Code:
# ifconfig
dsl       Link encap:Point-Point Protocol
          inet addr:169.254.2.1  P-t-P:169.254.2.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:4872 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6779 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:3911743 (3.7 MiB)  TX bytes:1541309 (1.4 MiB)

eth0      Link encap:Ethernet  HWaddr 00:04:0E:A9:51:BE
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:145 errors:0 dropped:8 overruns:0 frame:8
          TX packets:2169 errors:1 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:256
          RX bytes:24164 (23.5 KiB)  TX bytes:611314 (596.9 KiB)

eth0:1    Link encap:Ethernet  HWaddr 00:04:0E:A9:51:BE
          inet addr:192.168.178.253  Bcast:192.168.178.255  Mask:255.255.255.0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1

eth1      Link encap:Ethernet  HWaddr 00:04:0E:A9:51:BF
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:5941 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5631 errors:1 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:256
          RX bytes:1398231 (1.3 MiB)  TX bytes:2595838 (2.4 MiB)
          Base address:0x2800

lan       Link encap:Ethernet  HWaddr 00:04:0E:A9:51:BE
          inet addr:192.168.36.1  Bcast:192.168.36.255  Mask:255.255.255.0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:8851 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5258 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2027976 (1.9 MiB)  TX bytes:1795130 (1.7 MiB)

lan:0     Link encap:Ethernet  HWaddr 00:04:0E:A9:51:BE
          inet addr:169.254.1.1  Bcast:169.254.255.255  Mask:255.255.0.0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:307 errors:0 dropped:0 overruns:0 frame:0
          TX packets:307 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:35868 (35.0 KiB)  TX bytes:35868 (35.0 KiB)

tiwlan0   Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:2893 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4880 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:712740 (696.0 KiB)  TX bytes:2421573 (2.3 MiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:372 (372.0 B)

usbrndis  Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C2
          UP BROADCAST ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wdsdw0    Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2159 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:624820 (610.1 KiB)

wdsdw1    Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2159 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:624820 (610.1 KiB)

wdsdw2    Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2159 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:624820 (610.1 KiB)

wdsdw3    Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2159 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:624468 (609.8 KiB)

wdsup0    Link encap:Ethernet  HWaddr 00:04:0E:A9:51:C0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2159 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:624820 (610.1 KiB)

#
 
soweit, so "schlecht" (denn das sieht soweit eigentlich "gut" aus).
Wenn der Client verbunden ist, was sagt das log, was ein ipconfig über das tunnel-Interface des Clients?

Am besten wäre natürlich jetzt nochmal ein Log vom Server, was du bekommt mit (jetzt das daemon temporär wieder raus, wo es gerade drin ist ;-)):
Code:
grep -v daemon /var/tmp/server.ovpn > /var/tmp/nodaemon.ovpn
killall openvpn
/var/tmp/openvpn --config /var/tmp/nodaemon.ovpn

Jörg
 
naja das verbinden klappt ja nicht. Somit kann ich Dir ja kein gescheites log schicken. Die beiden Monitore von Openvpn aufm Lappi bleiben gelb.

Code:
# grep -v daemon /var/tmp/server.ovpn > /var/tmp/nodaemon.ovpn
# killall openvpn
# var/tmp/openvpn --config /var/tmp/nodaemon.ovpn
Sun Mar 23 21:55:44 2008 OpenVPN 2.1_rc1 mipsel-linux [SSL] [LZO2] [EPOLL] built
 on Jan  5 2007
Sun Mar 23 21:55:44 2008 IMPORTANT: OpenVPN's default port number is now 1194, b
ased on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earl
ier used 5000 as the default port.
Sun Mar 23 21:55:44 2008 TUN/TAP device tun0 opened
Sun Mar 23 21:55:44 2008 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1
500
Sun Mar 23 21:55:44 2008 UDPv4 link local (bound): [undef]:1194
Sun Mar 23 21:55:44 2008 UDPv4 link remote: [undef]
 
Blöde Frage: passt denn im Moment Portweiterleitung zur IP? Kannst du testweise mal "von innen", aus dem LAN (auf die IP 192.168.36.1) testen?

Jörg
 
Wenn ich die IP 192.168.36.1 anpinge oder die in das Adressfeld eingebe, bekomme ich einerseits Antwort, andererseits komme ich auf die Make der FB.
 
... ich meinte eine VPN-Verbindung auf die Box von innen (und deren Logs)...
 
Zumindest werden dann beide Monitore grün.

Code:
Sun Mar 23 22:05:02 2008 us=384000 Current Parameter Settings:
Sun Mar 23 22:05:02 2008 us=384000   config = 'client.ovpn'
Sun Mar 23 22:05:02 2008 us=384000   mode = 0
Sun Mar 23 22:05:02 2008 us=384000   show_ciphers = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   show_digests = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   show_engines = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   genkey = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   key_pass_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   show_tls_ciphers = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   proto = 0
Sun Mar 23 22:05:02 2008 us=384000   local = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   remote_list[0] = {'192.168.36.1', 1194}
Sun Mar 23 22:05:02 2008 us=384000   remote_random = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   local_port = 1194
Sun Mar 23 22:05:02 2008 us=384000   remote_port = 1194
Sun Mar 23 22:05:02 2008 us=384000   remote_float = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   ipchange = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   bind_defined = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   bind_local = ENABLED
Sun Mar 23 22:05:02 2008 us=384000   dev = 'tun'
Sun Mar 23 22:05:02 2008 us=384000   dev_type = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   dev_node = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   lladdr = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   topology = 1
Sun Mar 23 22:05:02 2008 us=384000   tun_ipv6 = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   ifconfig_local = '10.8.0.2'
Sun Mar 23 22:05:02 2008 us=384000   ifconfig_remote_netmask = '10.8.0.1'
Sun Mar 23 22:05:02 2008 us=384000   ifconfig_noexec = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   ifconfig_nowarn = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   shaper = 0
Sun Mar 23 22:05:02 2008 us=384000   tun_mtu = 1500
Sun Mar 23 22:05:02 2008 us=384000   tun_mtu_defined = ENABLED
Sun Mar 23 22:05:02 2008 us=384000   link_mtu = 1500
Sun Mar 23 22:05:02 2008 us=384000   link_mtu_defined = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   tun_mtu_extra = 0
Sun Mar 23 22:05:02 2008 us=384000   tun_mtu_extra_defined = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   fragment = 0
Sun Mar 23 22:05:02 2008 us=384000   mtu_discover_type = -1
Sun Mar 23 22:05:02 2008 us=384000   mtu_test = 0
Sun Mar 23 22:05:02 2008 us=384000   mlock = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   keepalive_ping = 0
Sun Mar 23 22:05:02 2008 us=384000   keepalive_timeout = 0
Sun Mar 23 22:05:02 2008 us=384000   inactivity_timeout = 0
Sun Mar 23 22:05:02 2008 us=384000   ping_send_timeout = 0
Sun Mar 23 22:05:02 2008 us=384000   ping_rec_timeout = 0
Sun Mar 23 22:05:02 2008 us=384000   ping_rec_timeout_action = 0
Sun Mar 23 22:05:02 2008 us=384000   ping_timer_remote = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   remap_sigusr1 = 0
Sun Mar 23 22:05:02 2008 us=384000   explicit_exit_notification = 0
Sun Mar 23 22:05:02 2008 us=384000   persist_tun = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   persist_local_ip = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   persist_remote_ip = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   persist_key = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   mssfix = 1450
Sun Mar 23 22:05:02 2008 us=384000   resolve_retry_seconds = 1000000000
Sun Mar 23 22:05:02 2008 us=384000   connect_retry_seconds = 5
Sun Mar 23 22:05:02 2008 us=384000   connect_timeout = 10
Sun Mar 23 22:05:02 2008 us=384000   connect_retry_max = 0
Sun Mar 23 22:05:02 2008 us=384000   username = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   groupname = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   chroot_dir = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   cd_dir = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   writepid = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   up_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   down_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=384000   down_pre = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   up_restart = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   up_delay = DISABLED
Sun Mar 23 22:05:02 2008 us=384000   daemon = DISABLED
Sun Mar 23 22:05:02 2008 us=584000   inetd = 0
Sun Mar 23 22:05:02 2008 us=584000   log = DISABLED
Sun Mar 23 22:05:02 2008 us=584000   suppress_timestamps = DISABLED
Sun Mar 23 22:05:02 2008 us=584000   nice = 0
Sun Mar 23 22:05:02 2008 us=584000   verbosity = 6
Sun Mar 23 22:05:02 2008 us=584000   mute = 0
Sun Mar 23 22:05:02 2008 us=584000   gremlin = 0
Sun Mar 23 22:05:02 2008 us=584000   status_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=584000   status_file_version = 1
Sun Mar 23 22:05:02 2008 us=584000   status_file_update_freq = 60
Sun Mar 23 22:05:02 2008 us=584000   occ = ENABLED
Sun Mar 23 22:05:02 2008 us=584000   rcvbuf = 0
Sun Mar 23 22:05:02 2008 us=584000   sndbuf = 0
Sun Mar 23 22:05:02 2008 us=584000   sockflags = 0
Sun Mar 23 22:05:02 2008 us=584000   socks_proxy_server = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=584000   socks_proxy_port = 0
Sun Mar 23 22:05:02 2008 us=584000   socks_proxy_retry = DISABLED
Sun Mar 23 22:05:02 2008 us=584000   fast_io = DISABLED
Sun Mar 23 22:05:02 2008 us=594000   lzo = 0
Sun Mar 23 22:05:02 2008 us=594000   route_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=594000   route_default_gateway = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=594000   route_default_metric = 0
Sun Mar 23 22:05:02 2008 us=594000   route_noexec = DISABLED
Sun Mar 23 22:05:02 2008 us=594000   route_delay = 5
Sun Mar 23 22:05:02 2008 us=594000   route_delay_window = 30
Sun Mar 23 22:05:02 2008 us=594000   route_delay_defined = ENABLED
Sun Mar 23 22:05:02 2008 us=594000   route_nopull = DISABLED
Sun Mar 23 22:05:02 2008 us=594000   management_addr = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=594000   management_port = 0
Sun Mar 23 22:05:02 2008 us=594000   management_user_pass = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=594000   management_log_history_cache = 250
Sun Mar 23 22:05:02 2008 us=594000   management_echo_buffer_size = 100
Sun Mar 23 22:05:02 2008 us=594000   management_query_passwords = DISABLED
Sun Mar 23 22:05:02 2008 us=594000   management_hold = DISABLED
Sun Mar 23 22:05:02 2008 us=604000   management_client = DISABLED
Sun Mar 23 22:05:02 2008 us=604000   management_signal = DISABLED
Sun Mar 23 22:05:02 2008 us=604000   management_forget_disconnect = DISABLED
Sun Mar 23 22:05:02 2008 us=604000   management_write_peer_info_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=604000   shared_secret_file = 'E:\programme\openvpn\key.key'
Sun Mar 23 22:05:02 2008 us=604000   key_direction = 0
Sun Mar 23 22:05:02 2008 us=604000   ciphername_defined = ENABLED
Sun Mar 23 22:05:02 2008 us=604000   ciphername = 'BF-CBC'
Sun Mar 23 22:05:02 2008 us=604000   authname_defined = ENABLED
Sun Mar 23 22:05:02 2008 us=604000   authname = 'SHA1'
Sun Mar 23 22:05:02 2008 us=604000   keysize = 0
Sun Mar 23 22:05:02 2008 us=604000   engine = DISABLED
Sun Mar 23 22:05:02 2008 us=604000   replay = ENABLED
Sun Mar 23 22:05:02 2008 us=604000   mute_replay_warnings = DISABLED
Sun Mar 23 22:05:02 2008 us=604000   replay_window = 64
Sun Mar 23 22:05:02 2008 us=624000   replay_time = 15
Sun Mar 23 22:05:02 2008 us=624000   packet_id_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   use_iv = ENABLED
Sun Mar 23 22:05:02 2008 us=624000   test_crypto = DISABLED
Sun Mar 23 22:05:02 2008 us=624000   tls_server = DISABLED
Sun Mar 23 22:05:02 2008 us=624000   tls_client = DISABLED
Sun Mar 23 22:05:02 2008 us=624000   key_method = 2
Sun Mar 23 22:05:02 2008 us=624000   ca_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   ca_path = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   dh_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   cert_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   priv_key_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   pkcs12_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   cryptoapi_cert = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   cipher_list = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=624000   tls_verify = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=634000   tls_remote = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=634000   crl_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=634000   ns_cert_type = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=634000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=645000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=645000   remote_cert_ku[i] = 0
Sun Mar 23 22:05:02 2008 us=645000   remote_cert_eku = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=645000   tls_timeout = 2
Sun Mar 23 22:05:02 2008 us=645000   renegotiate_bytes = 0
Sun Mar 23 22:05:02 2008 us=645000   renegotiate_packets = 0
Sun Mar 23 22:05:02 2008 us=645000   renegotiate_seconds = 3600
Sun Mar 23 22:05:02 2008 us=645000   handshake_window = 60
Sun Mar 23 22:05:02 2008 us=645000   transition_window = 3600
Sun Mar 23 22:05:02 2008 us=645000   single_session = DISABLED
Sun Mar 23 22:05:02 2008 us=645000   tls_exit = DISABLED
Sun Mar 23 22:05:02 2008 us=645000   tls_auth_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=645000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=645000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=645000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=665000   pkcs11_protected_authentication = DISABLED
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=675000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_private_mode = 00000000
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=685000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=705000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=705000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=705000   pkcs11_cert_private = DISABLED
Sun Mar 23 22:05:02 2008 us=705000   pkcs11_pin_cache_period = -1
Sun Mar 23 22:05:02 2008 us=705000   pkcs11_id = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=705000   server_network = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   server_netmask = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   server_bridge_ip = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   server_bridge_netmask = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   server_bridge_pool_start = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   server_bridge_pool_end = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   ifconfig_pool_defined = DISABLED
Sun Mar 23 22:05:02 2008 us=705000   ifconfig_pool_start = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   ifconfig_pool_end = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=705000   ifconfig_pool_netmask = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=715000   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=715000   ifconfig_pool_persist_refresh_freq = 600
Sun Mar 23 22:05:02 2008 us=715000   n_bcast_buf = 256
Sun Mar 23 22:05:02 2008 us=715000   tcp_queue_limit = 64
Sun Mar 23 22:05:02 2008 us=715000   real_hash_size = 256
Sun Mar 23 22:05:02 2008 us=715000   virtual_hash_size = 256
Sun Mar 23 22:05:02 2008 us=715000   client_connect_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=715000   learn_address_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=715000   client_disconnect_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=715000   client_config_dir = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=715000   ccd_exclusive = DISABLED
Sun Mar 23 22:05:02 2008 us=715000   tmp_dir = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=715000   push_ifconfig_defined = DISABLED
Sun Mar 23 22:05:02 2008 us=715000   push_ifconfig_local = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=715000   push_ifconfig_remote_netmask = 0.0.0.0
Sun Mar 23 22:05:02 2008 us=725000   enable_c2c = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   duplicate_cn = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   cf_max = 0
Sun Mar 23 22:05:02 2008 us=725000   cf_per = 0
Sun Mar 23 22:05:02 2008 us=725000   max_clients = 1024
Sun Mar 23 22:05:02 2008 us=725000   max_routes_per_client = 256
Sun Mar 23 22:05:02 2008 us=725000   client_cert_not_required = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   username_as_common_name = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   auth_user_pass_verify_script = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=725000   auth_user_pass_verify_script_via_file = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   client = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   pull = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   auth_user_pass_file = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=725000   show_net_up = DISABLED
Sun Mar 23 22:05:02 2008 us=725000   route_method = 0
Sun Mar 23 22:05:02 2008 us=735000   ip_win32_defined = DISABLED
Sun Mar 23 22:05:02 2008 us=735000   ip_win32_type = 3
Sun Mar 23 22:05:02 2008 us=735000   dhcp_masq_offset = 0
Sun Mar 23 22:05:02 2008 us=735000   dhcp_lease_time = 31536000
Sun Mar 23 22:05:02 2008 us=735000   tap_sleep = 0
Sun Mar 23 22:05:02 2008 us=735000   dhcp_options = DISABLED
Sun Mar 23 22:05:02 2008 us=735000   dhcp_renew = DISABLED
Sun Mar 23 22:05:02 2008 us=735000   dhcp_pre_release = DISABLED
Sun Mar 23 22:05:02 2008 us=735000   dhcp_release = DISABLED
Sun Mar 23 22:05:02 2008 us=735000   domain = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=735000   netbios_scope = '[UNDEF]'
Sun Mar 23 22:05:02 2008 us=735000   netbios_node_type = 0
Sun Mar 23 22:05:02 2008 us=735000   disable_nbt = DISABLED
Sun Mar 23 22:05:02 2008 us=735000 OpenVPN 2.1_rc7 Win32-MinGW [SSL] [LZO2] [PKCS11] built on Jan 29 2008
Sun Mar 23 22:05:02 2008 us=735000 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Mar 23 22:05:02 2008 us=745000 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Mar 23 22:05:02 2008 us=745000 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Mar 23 22:05:02 2008 us=745000 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Mar 23 22:05:02 2008 us=745000 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Mar 23 22:05:02 2008 us=785000 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{83698A28-A87F-4A38-86C3-C23ACE6A56EC}.tap
Sun Mar 23 22:05:02 2008 us=795000 TAP-Win32 Driver Version 9.4 
Sun Mar 23 22:05:02 2008 us=795000 TAP-Win32 MTU=1500
Sun Mar 23 22:05:02 2008 us=805000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {83698A28-A87F-4A38-86C3-C23ACE6A56EC} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Sun Mar 23 22:05:02 2008 us=805000 Successful ARP Flush on interface [4] {83698A28-A87F-4A38-86C3-C23ACE6A56EC}
Sun Mar 23 22:05:02 2008 us=815000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Sun Mar 23 22:05:02 2008 us=815000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sun Mar 23 22:05:02 2008 us=815000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sun Mar 23 22:05:02 2008 us=815000 Local Options hash (VER=V4): 'd3880969'
Sun Mar 23 22:05:02 2008 us=815000 Expected Remote Options hash (VER=V4): 'c41bf3b8'
Sun Mar 23 22:05:02 2008 us=815000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Mar 23 22:05:02 2008 us=825000 UDPv4 link local (bound): [undef]:1194
Sun Mar 23 22:05:02 2008 us=825000 UDPv4 link remote: 192.168.36.1:1194
Sun Mar 23 22:05:12 2008 us=18000 UDPv4 WRITE [60] to 192.168.36.1:1194:  DATA len=60
Sun Mar 23 22:05:12 2008 us=38000 UDPv4 READ [180] from 192.168.36.1:1194:  DATA len=180
Sun Mar 23 22:05:12 2008 us=38000 Peer Connection Initiated with 192.168.36.1:1194
Sun Mar 23 22:05:18 2008 us=838000 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
Sun Mar 23 22:05:18 2008 us=838000 Initialization Sequence Completed
 
So sollte ein Ping auf die Box klappen (per VPN-IP)??
 
Kostenlos!

Statistik des Forums

Themen
248,847
Beiträge
2,302,778
Mitglieder
378,497
Neuestes Mitglied
guenther1987