FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.
0 votes
307 views 0 comments
by
All,

I was able to create the ca, server and client certificates  and keys.

I also looked at:

https://wiki.teltonika-networks.com/view/OpenVPN_configuration_examples#Testing_an_OpenVPN_connection

For the client I uses openVPN with the settings below:

client

dev tun

proto udp

remote xxxxxxxx 8099 (I use this port on the rut240)

resolv-retry infinite

keepalive 5 10

nobind

persist-key

persist-tun

cipher AES-128-CBC

comp-lzo

--data-ciphers AES-256-GCM:AES-128-GCM

verb 3

should I use remote tls-server?

This is what I get with openVPN:

2021-01-26 20:08:18 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25343

2021-01-26 20:08:18 Need hold release from management interface, waiting...

2021-01-26 20:08:18 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25343

2021-01-26 20:08:18 MANAGEMENT: CMD 'state on'

2021-01-26 20:08:18 MANAGEMENT: CMD 'log all on'

2021-01-26 20:08:18 MANAGEMENT: CMD 'echo all on'

2021-01-26 20:08:18 MANAGEMENT: CMD 'bytecount 5'

2021-01-26 20:08:18 MANAGEMENT: CMD 'hold off'

2021-01-26 20:08:18 MANAGEMENT: CMD 'hold release'

2021-01-26 20:08:18 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2021-01-26 20:08:18 MANAGEMENT: >STATE:1611688098,RESOLVE,,,,,,

2021-01-26 20:08:18 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:8099

2021-01-26 20:08:18 Socket Buffers: R=[65536->65536] S=[65536->65536]

2021-01-26 20:08:18 UDP link local: (not bound)

2021-01-26 20:08:18 UDP link remote: [AF_INET]178.227.15.56:8099

2021-01-26 20:08:18 MANAGEMENT: >STATE:1611688098,WAIT,,,,,,

2021-01-26 20:08:28 [UNDEF] Inactivity timeout (--ping-restart), restarting

2021-01-26 20:08:28 SIGUSR1[soft,ping-restart] received, process restarting

2021-01-26 20:08:28 MANAGEMENT: >STATE:1611688108,RECONNECTING,ping-restart,,,,,

2021-01-26 20:08:28 Restart pause, 5 second(s)

2021-01-26 20:08:32 SIGTERM[hard,init_instance] received, process exiting

2021-01-26 20:08:32 MANAGEMENT: >STATE:1611688112,EXITING,init_instance,,,,,

What I'm doing wrong?

1 Answer

0 votes
by anonymous
Hello,

I would like to ask you, if could you share your server configuration too? You could send me a private message with screenshots of both sides of the configuration (server and client), I will check where things possibly went wrong.

Best regards.