www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

Cannot connect to OpenVPN. I need it to work.

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
igork



Joined: 16 Oct 2015
Posts: 33

PostPosted: Sun Oct 18, 2015 1:33 pm    Post subject: Cannot connect to OpenVPN. I need it to work. Reply with quote

Hello,

I am trying to configure OpenVPN (Host to VPN). Based on the documentation, there is not much to do. I enabled the server. Downloaded zeroshell.ovpn file and CA.pem file.

I have two computers that I used with my previous firewall, so all I had to do it just replace files in config folder with new files.

When I try to connect, it asks me about user name and password and, after that, I have the following:

Quote:
Sun Oct 18 08:25:00 2015 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Sun Oct 18 08:25:00 2015 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Sun Oct 18 08:25:00 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Oct 18 08:25:00 2015 Need hold release from management interface, waiting...
Sun Oct 18 08:25:01 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Oct 18 08:25:01 2015 MANAGEMENT: CMD 'state on'
Sun Oct 18 08:25:01 2015 MANAGEMENT: CMD 'log all on'
Sun Oct 18 08:25:01 2015 MANAGEMENT: CMD 'hold off'
Sun Oct 18 08:25:01 2015 MANAGEMENT: CMD 'hold release'
Sun Oct 18 08:25:07 2015 MANAGEMENT: CMD 'username "Auth" "admin"'
Sun Oct 18 08:25:07 2015 MANAGEMENT: CMD 'password [...]'
Sun Oct 18 08:25:07 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Oct 18 08:25:07 2015 Socket Buffers: R=[8192->8192] S=[64512->64512]
Sun Oct 18 08:25:07 2015 MANAGEMENT: >STATE:1445174707,RESOLVE,,,
Sun Oct 18 08:25:07 2015 Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194
Sun Oct 18 08:25:07 2015 MANAGEMENT: >STATE:1445174707,TCP_CONNECT,,,
Sun Oct 18 08:25:28 2015 TCP: connect to [AF_INET]x.x.x.x:1194 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
Sun Oct 18 08:25:33 2015 MANAGEMENT: >STATE:1445174733,RESOLVE,,,
Sun Oct 18 08:25:33 2015 MANAGEMENT: >STATE:1445174733,TCP_CONNECT,,,
Sun Oct 18 08:25:54 2015 TCP: connect to [AF_INET]x.x.x.x:1194 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
Sun Oct 18 08:25:59 2015 MANAGEMENT: >STATE:1445174759,RESOLVE,,,
Sun Oct 18 08:25:59 2015 MANAGEMENT: >STATE:1445174759,TCP_CONNECT,,,


And continues with last three lines forever.

There is nothing else in documentation. I also use it as a router and firewall. I configured firewall to connect to my web server, and I tried the same configuration to point it to my VPN interface, but it did not help. Because my web server works, and I configured rule for OpenVPN port exactly the same way, I am sure the problem is not the rule. But, who knows.....

I am new to ZeroShell and I really need help. I need VPN to work, or I will not be able to use it. Please help.

Version of ZeroShell is 3.4.0
Back to top
View user's profile Send private message
redfive



Joined: 27 Aug 2009
Posts: 232

PostPosted: Sun Oct 18, 2015 2:58 pm    Post subject: Reply with quote

Are you sure that the TCP 1194 is correctly forwarded to ZS ? And what about the ZS's firewall rules, INPUT ? Also, the logs on ZS's side, VPN99_H2L ?
Regards
Back to top
View user's profile Send private message
igork



Joined: 16 Oct 2015
Posts: 33

PostPosted: Sun Oct 18, 2015 6:05 pm    Post subject: Reply with quote

You were right, I had a typo in a rule, and I can connect now.

Thank you for your reply.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group