LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   OpenVPN problem (https://www.linuxquestions.org/questions/linux-networking-3/openvpn-problem-485841/)

Rognon 09-21-2006 08:03 PM

OpenVPN problem
 
Hi there,
I want to connect to my work's OpenVPN server but I've got some issues. I've got all the keys set up and the openvpn client installed on my machine. When I start it, I get this :

Code:

]# openvpn client.conf
Thu Sep 21 20:51:52 2006 OpenVPN 2.0.8 i686-pc-linux [SSL] [LZO] [EPOLL] built on Sep 20 2006
Thu Sep 21 20:51:52 2006 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Sep 21 20:51:52 2006 WARNING: file 'myname.key' is group or others accessible
Thu Sep 21 20:51:52 2006 WARNING: file 'ta.key' is group or others accessible
Thu Sep 21 20:51:52 2006 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Thu Sep 21 20:51:52 2006 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 21 20:51:52 2006 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 21 20:51:52 2006 LZO compression initialized
Thu Sep 21 20:51:52 2006 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Sep 21 20:51:52 2006 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Sep 21 20:51:52 2006 Local Options hash (VER=V4): '504e774e'
Thu Sep 21 20:51:52 2006 Expected Remote Options hash (VER=V4): '14168603'
Thu Sep 21 20:51:52 2006 UDPv4 link local: [undef]
Thu Sep 21 20:51:52 2006 UDPv4 link remote: 66.158.xxx.xxx:5184
Thu Sep 21 20:51:53 2006 VERIFY OK: depth=1, /C=CA/ST=XX/L=XXXXXXX/O=XXXX/CN=vpn.XXX.xxx/emailAddress=xxxx@xxxx.xxx
Thu Sep 21 20:51:53 2006 VERIFY OK: nsCertType=SERVER
Thu Sep 21 20:51:53 2006 VERIFY OK: depth=0, /C=CA/ST=XX/L=XXXXXXX/O=XXXX/CN=vpn.XXX.xxx/emailAddress=xxxx@xxxx.xxx
Thu Sep 21 20:51:55 2006 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Sep 21 20:51:55 2006 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 21 20:51:55 2006 NOTE: --mute triggered...
Thu Sep 21 20:51:55 2006 3 variation(s) on previous 5 message(s) suppressed by --mute
Thu Sep 21 20:51:55 2006 [vpn.XXX.xxx] Peer Connection Initiated with 66.158.xxx.xxx:5184
Thu Sep 21 20:51:56 2006 TUN/TAP device tun0 opened
Thu Sep 21 20:51:56 2006 /sbin/ifconfig tun0 10.0.1.42 pointopoint 10.0.1.41 mtu 1500
SIOCADDRT: File exists
Thu Sep 21 20:51:56 2006 ERROR: Linux route add command failed: shell command exited with error status: 7
Thu Sep 21 20:51:56 2006 Initialization Sequence Completed

Next, if I look at my route :

Code:

# route
Kernel IP routing table
Destination    Gateway        Genmask        Flags Metric Ref    Use Iface
10.0.1.41      *              255.255.255.255 UH    0      0        0 tun0
10.0.100.0      10.0.1.41      255.255.255.0  UG    0      0        0 tun0
10.0.1.0        10.0.1.41      255.255.255.0  UG    0      0        0 tun0
192.168.0.0    *              255.255.255.0  U    0      0        0 eth0
default        192.168.0.1    0.0.0.0        UG    0      0        0 eth0

Now, I can browse the web normally, but I don't think that I'm actually using the VPN. First, I can't ping 10.0.1.41 and can't access the intranet. And second, if I do an ifconfig, I see that tun0 always has 0 packet send and received.

I would ask help from work before bothering you, but since they use windows, I though that you guys could help me better.

What am I missing ?

Thanks for your time,
Rognon

basileus 09-22-2006 06:06 AM

So you want to browse the net through your company's OpenVPN, am I right? I though of securing my wireless (WEP-encrypted) LAN using the same approach. Anyway, there is a chapter on this subject in OpenVPN howto. Check it out, maybe it will be of use.

Rognon 09-25-2006 06:33 PM

Thanks for your help but I've already checked the HOWTO but can't seem to find anything relevant to my problem...
Has anybody even had problems similar to mine ?

Thanks,
Rognon


All times are GMT -5. The time now is 04:53 AM.