Problème de connexion OVPN!

[gueutzilla]

Bonjour a tous,



Voila je rencontre un petit soucis de connexion sur le vpn2 (OpenVPN) de mon réseau.

Je vous explique ma configue :

Arriver du net sur ipcop1 qui est config en red + green + blue + orange. Advproxy et urlfilter son egalement installer dessus ainsi que Openvpn (ovpn1).

Les utilisateurs passent par un 2eme ipcop (ipcop2) pour le surf avec advproxy, urlfilter et filtrage des nom d'utilisateurs.


Sur ipcop1 j'ai donc monter un VPN avec zerina sur le port par défaut (1194) et qui a accès a tout le réseau (LAN et WAN) pour les astreintes et donc les inter a distance.

Sur ipcop2 j'ai monter un 2eme openvpn qui est destiné a donner accès a certains prestataires l'accès a une machine du LAN. Tout est donc bien créer mais voici les log que j'obtient lors de la connexion.

Coter client :

Tue Jul 18 17:57:39 2006 OpenVPN 2.0.7 Win32-MinGW [SSL] [LZO] built on Apr 12 2006
Tue Jul 18 17:57:39 2006 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Jul 18 17:57:42 2006 LZO compression initialized
Tue Jul 18 17:57:42 2006 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jul 18 17:57:42 2006 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jul 18 17:57:42 2006 Local Options hash (VER=V4): '41690919'
Tue Jul 18 17:57:42 2006 Expected Remote Options hash (VER=V4): '530fdded'
Tue Jul 18 17:57:42 2006 UDPv4 link local (bound): [undef]:1194
Tue Jul 18 17:57:42 2006 UDPv4 link remote: MON_IP_DU_NET:10000
Tue Jul 18 17:58:42 2006 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 18 17:58:42 2006 TLS Error: TLS handshake failed
Tue Jul 18 17:58:42 2006 TCP/UDP: Closing socket
Tue Jul 18 17:58:42 2006 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 18 17:58:42 2006 Restart pause, 2 second(s)
Tue Jul 18 17:58:44 2006 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Jul 18 17:58:45 2006 LZO compression initialized
Tue Jul 18 17:58:45 2006 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jul 18 17:58:45 2006 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jul 18 17:58:45 2006 Local Options hash (VER=V4): '41690919'
Tue Jul 18 17:58:45 2006 Expected Remote Options hash (VER=V4): '530fdded'
Tue Jul 18 17:58:45 2006 UDPv4 link local (bound): [undef]:1194
Tue Jul 18 17:58:45 2006 UDPv4 link remote: MON_IP_DU_NET:10000

Coter server (ipcop2):

18:07:42 openvpnserver 89.83.221.239:1194 TLS: Initial packet from 89.83.221.239:1194, sid=025bde13 fd4 fb2f3
18:07:42 openvpnserver 89.83.221.239:1194 Expected Remote Options hash (VER=V4): '41690919'
18:07:42 openvpnserver 89.83.221.239:1194 Local Options hash (VER=V4): '530fdded'
18:07:42 openvpnserver 89.83.221.239:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
18:07:42 openvpnserver 89.83.221.239:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
18:07:42 openvpnserver 89.83.221.239:1194 LZO compression initialized
18:07:42 openvpnserver 89.83.221.239:1194 Re-using SSL/TLS context
18:07:42 openvpnserver MULTI: multi_create_instance called
18:07:40 openvpnserver 89.83.221.239:1194 SIGUSR1[soft,tls-error] received, client-instance restarting
18:07:40 openvpnserver 89.83.221.239:1194 TLS Error: TLS handshake failed
18:07:40 openvpnserver 89.83.221.239:1194 TLS Error: TLS key negotiation failed to occur within 60 seco nds (check your network connectivity)
18:06:40 openvpnserver 89.83.221.239:1194 TLS: Initial packet from 89.83.221.239:1194, sid=3ba40f19 8c6 8cb8a
18:06:40 openvpnserver 89.83.221.239:1194 Expected Remote Options hash (VER=V4): '41690919'
18:06:40 openvpnserver 89.83.221.239:1194 Local Options hash (VER=V4): '530fdded'
18:06:40 openvpnserver 89.83.221.239:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
18:06:40 openvpnserver 89.83.221.239:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
18:06:40 openvpnserver 89.83.221.239:1194 LZO compression initialized
18:06:40 openvpnserver 89.83.221.239:1194 Re-using SSL/TLS context
18:06:40 openvpnserver MULTI: multi_create_instance called
18:06:37 openvpnserver 89.83.221.239:1194 SIGUSR1[soft,tls-error] received, client-instance restarting
18:06:37 openvpnserver 89.83.221.239:1194 TLS Error: TLS handshake failed
18:06:37 openvpnserver 89.83.221.239:1194 TLS Error: TLS key negotiation failed to occur within 60 seco nds (check your network connectivity)
18:05:37 openvpnserver 89.83.221.239:1194 TLS: Initial packet from 89.83.221.239:1194, sid=028daac4 07a b227e
18:05:37 openvpnserver 89.83.221.239:1194 Expected Remote Options hash (VER=V4): '41690919'
18:05:37 openvpnserver 89.83.221.239:1194 Local Options hash (VER=V4): '530fdded'
18:05:37 openvpnserver 89.83.221.239:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
18:05:37 openvpnserver 89.83.221.239:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
18:05:37 openvpnserver 89.83.221.239:1194 LZO compression initialized
18:05:37 openvpnserver 89.83.221.239:1194 Re-using SSL/TLS context
18:05:37 openvpnserver MULTI: multi_create_instance called

Je pense que c'est la ligne du log coter client que j'ai mis en rouge qui pose problème!!!!
En effet on dirait qu'il essaye d'utiliser le port 1194 pour s'authentifier sur ipcop2 mais comme celui ci est deja utiliser par ipcop1 je pense que cela pose problème.

Savez vous comment modifier la valeur : UDPv4 link local (bound): [undef]:1194 afin de lui définir le port 10000???


Plutot une configue a mettre en place coter client dans le fichier *.ovpn ou plutot coter server???


Merci d'avance

[kinkey]

Salut, tu va dans le panneau de configuration de Zerina et tu modifie la valeur dans le champs "Port destination:". Ensuite tu renvoie la config sur ton client.

[gueutzilla]

Sa a déjà été fait lors de la config.

Le port destination est deja config a 10000 coter server et client aussi.

Tue Jul 18 17:58:45 2006 UDPv4 link local (bound): [undef]:1194 <--- port local bound [undef] que je voudrais passer a 10000 également
Tue Jul 18 17:58:45 2006 UDPv4 link remote: MON_IP_DU_NET:10000


le port de connexion est bien le 10000 comme préciser dans les log(ip publique masquer biensure).



Merci d'avance pour votre aide

[gueutzilla]

Voila j'apporte quelques éléments supplémentaire a mon problème voici des log en passant sur le port 2000 au lieu de 10000 :

Coter client maintenant j'ai cette erreur

Tue Jul 25 11:23:03 2006 OpenVPN 2.0.7 Win32-MinGW [SSL] [LZO] built on Apr 12 2006
Tue Jul 25 11:23:03 2006 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Jul 25 11:23:09 2006 LZO compression initialized
Tue Jul 25 11:23:09 2006 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jul 25 11:23:09 2006 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jul 25 11:23:09 2006 Local Options hash (VER=V4): '41690919'
Tue Jul 25 11:23:09 2006 Expected Remote Options hash (VER=V4): '530fdded'
Tue Jul 25 11:23:09 2006 UDPv4 link local (bound): [undef]:1194
Tue Jul 25 11:23:09 2006 UDPv4 link remote: xxx.xx.xx.xxx:2000
Tue Jul 25 11:23:10 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:11 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:13 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:15 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:16 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:18 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:21 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:23 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:26 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 11:23:28 2006 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

Et pour le serveur maintenant j'ai sa:

11:23:01 openvpnserver event_wait : Interrupted system call (code=4)
11:23:01 openvpnserver TCP/UDP: Closing socket
11:23:01 openvpnserver /sbin/route del -net 10.9.8.0 netmask 255.255.255.0
11:23:01 openvpnserver ERROR: Linux route delete command failed: shell command exited with error status : 7
11:23:01 openvpnserver Closing TUN/TAP interface
11:23:01 openvpnserver SIGTERM[hard,] received, process exiting
11:23:06 openvpnserver OpenVPN 2.0.7 i386-pc-linux [SSL] [LZO] built on Apr 15 2006
11:23:06 openvpnserver Diffie-Hellman initialized with 1024 bit key
11:23:06 openvpnserver TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
11:23:06 openvpnserver TUN/TAP device tun0 opened
11:23:06 openvpnserver /sbin/ifconfig tun0 10.9.8.1 pointopoint 10.9.8.2 mtu 1500
11:23:06 openvpnserver /sbin/route add -net 10.9.8.0 netmask 255.255.255.0 gw 10.9.8.2
11:23:06 openvpnserver Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
11:23:06 openvpnserver GID set to nobody
11:23:06 openvpnserver UID set to nobody
11:23:06 openvpnserver UDPv4 link local (bound): [undef]:10000
11:23:06 openvpnserver UDPv4 link remote: [undef]
11:23:06 openvpnserver MULTI: multi_init called, r=256 v=256
11:23:06 openvpnserver IFCONFIG POOL: base=10.9.8.4 size=62
11:23:06 openvpnserver Initialization Sequence Completed
11:23:09 openvpnserver event_wait : Interrupted system call (code=4)
11:23:09 openvpnserver TCP/UDP: Closing socket
11:23:09 openvpnserver /sbin/route del -net 10.9.8.0 netmask 255.255.255.0
11:23:09 openvpnserver ERROR: Linux route delete command failed: shell command exited with error status : 7
11:23:09 openvpnserver Closing TUN/TAP interface
11:23:09 openvpnserver SIGTERM[hard,] received, process exiting
11:23:25 openvpnserver OpenVPN 2.0.7 i386-pc-linux [SSL] [LZO] built on Apr 15 2006
11:23:26 openvpnserver Diffie-Hellman initialized with 1024 bit key
11:23:26 openvpnserver TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
11:23:26 openvpnserver TUN/TAP device tun0 opened
11:23:26 openvpnserver /sbin/ifconfig tun0 10.9.8.1 pointopoint 10.9.8.2 mtu 1500
11:23:26 openvpnserver /sbin/route add -net 10.9.8.0 netmask 255.255.255.0 gw 10.9.8.2
11:23:26 openvpnserver Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
11:23:26 openvpnserver GID set to nobody
11:23:26 openvpnserver UID set to nobody
11:23:26 openvpnserver UDPv4 link local (bound): [undef]:2000
11:23:26 openvpnserver UDPv4 link remote: [undef]
11:23:26 openvpnserver MULTI: multi_init called, r=256 v=256
11:23:26 openvpnserver IFCONFIG POOL: base=10.9.8.4 size=62
11:23:26 openvpnserver Initialization Sequence Completed

Merci d'avance pour votre aide.