Unable to connect to OpenVPN from WAN

Post new topic   Reply to topic    DD-WRT Forum Index -> Generic Questions
Author Message
sufrano63
DD-WRT User


Joined: 06 Jun 2006
Posts: 488

PostPosted: Wed Jun 07, 2006 11:32    Post subject: Unable to connect to OpenVPN from WAN Reply with quote
Hi all,

I'm having problem connecting to my router wrt54g running openvpn w/v23 sp1 final built 05/30 vpn. I was able to connect from inside my LAN, but cannot connect from outside WAN. I've attached a server and client config and openvpn log below. Appreciate any help

Server config

iptables -I INPUT 1 -p tcp --dport 443 -j ACCEPT
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
echo "
-----BEGIN OpenVPN Static key V1-----
...INSERT YOUR OWN CONTENT HERE...
-----END OpenVPN Static key V1-----
" > /tmp/static.key
ln -s /usr/sbin/openvpn /tmp/myvpn
/tmp/myvpn --dev tap0 --secret /tmp/static.key --comp-lzo --port 443 --proto tcp-server --verb 3 --daemon

Client config

remote dyndns.homeip.net

port 443
dev tap

secret static.key
proto tcp-client
comp-lzo

##route-gateway 192.168.1.1
##redirect-gateway

OpenVPN log

Tue Jun 06 08:53:26 2006 OpenVPN 2.0.7 Win32-MinGW [SSL] [LZO] built on Apr 12 2006
Tue Jun 06 08:53:26 2006 LZO compression initialized
Tue Jun 06 08:53:31 2006 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{23D4B759-9EF0-4948-8CE3-71D886B1E75C}.tap
Tue Jun 06 08:53:31 2006 Successful ARP Flush on interface [196612] {23D4B759-9EF0-4948-8CE3-71D886B1E75C}
Tue Jun 06 08:53:31 2006 Attempting to establish TCP connection with 72.x.x.x:443
Tue Jun 06 08:53:31 2006 TCP connection established with 72.x.x.x:443
Tue Jun 06 08:53:31 2006 TCPv4_CLIENT link local: [undef]
Tue Jun 06 08:53:31 2006 TCPv4_CLIENT link remote: 72.x.x.x:443
Tue Jun 06 08:54:31 2006 Connection reset, restarting [0]
Tue Jun 06 08:54:31 2006 SIGUSR1[soft,connection-reset] received, process restarting
Tue Jun 06 08:54:36 2006 LZO compression initialized
Tue Jun 06 08:54:37 2006 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{23D4B759-9EF0-4948-8CE3-71D886B1E75C}.tap
Tue Jun 06 08:54:37 2006 Successful ARP Flush on interface [196612] {23D4B759-9EF0-4948-8CE3-71D886B1E75C}
Tue Jun 06 08:54:37 2006 Attempting to establish TCP connection with 72.x.x.x:443
Tue Jun 06 08:54:58 2006 TCP: connect to 72.x.x.x:443 failed, will try again in 5 seconds
Tue Jun 06 08:55:03 2006 TCP connection established with 72.x.x.x:443
Tue Jun 06 08:55:03 2006 TCP/UDP: Dynamic remote address changed during TCP connection establishment
Tue Jun 06 08:55:03 2006 TCPv4_CLIENT link local: [undef]
Tue Jun 06 08:55:03 2006 TCPv4_CLIENT link remote: 72.x.x.x:443
Tue Jun 06 08:56:09 2006 Connection reset, restarting [0]
Tue Jun 06 08:56:09 2006 SIGUSR1[soft,connection-reset] received, process restarting
Tue Jun 06 08:56:14 2006 LZO compression initialized
Tue Jun 06 08:56:14 2006

Thank You

_________________
блог путешественника
Sponsor
kevank
DD-WRT User


Joined: 08 Jun 2006
Posts: 57

PostPosted: Thu Jun 08, 2006 3:08    Post subject: Reply with quote
What happens when you telnet to port 443 from the outside? On windows:
telnet server.ip.com 443

Does it connect and give you a blinking cursor or do you get a connection failure?

Kevan
Geek-Pages.com
HOWTO for setting up OpenVPN on DD-WRT
sufrano63
DD-WRT User


Joined: 06 Jun 2006
Posts: 488

PostPosted: Thu Jun 08, 2006 11:21    Post subject: Reply with quote
kevank wrote:
What happens when you telnet to port 443 from the outside? On windows:
telnet server.ip.com 443

Does it connect and give you a blinking cursor or do you get a connection failure?

Kevan


I got it working now. It was a typo mistake. Being a Linux newbie, I didn't realized the commands all had to be in "1" line.

Once connected from the WAN, I'm able to ping my router (192.168.1.1), but unable to connect via a browser or see any of my other clients.

Thanks for responding kevank

_________________
блог путешественника
wlarson
DD-WRT Novice


Joined: 17 Jun 2006
Posts: 1

PostPosted: Sat Jun 17, 2006 3:43    Post subject: Reply with quote
kevank wrote:
What happens when you telnet to port 443 from the outside? On windows:
telnet server.ip.com 443

Does it connect and give you a blinking cursor or do you get a connection failure?

Kevan
Geek-Pages.com
HOWTO for setting up OpenVPN on DD-WRT


I had this problem and wasn't able to telnet (good troubleshooting start!). I just disabled the SPI firewall on the "server" WRT and it connected. Is this the proper way to go? I'm sort of following the Wiki for a static key WRT but I also used your info because the Wiki isn't clear on the WRT as the client in that setup.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Generic Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum