zlobin21
Newbie | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
vlary
client
#connect to VPN server
remote 142.4.223.230 443
proto tcp
#DNS server to use
dhcp-option DNS 8.8.8.8
#remove to use your ISP's gateway
redirect-gateway def1
#your access keys
ca in_ca.crt
cert in_6832198.crt
key in_6832198.key
ns-cert-type server
#use virtual interface 'tap'
dev tap
#keep trying indefinitely to resolve the host name of the OpenVPN server.
resolv-retry infinite
#most clients don't need to bind to a specific local port number.
nobind
#try to preserve some state across restarts
persist-key
persist-tun
#enable compression on the VPN link
comp-lzo
#set log file verbosity.
verb 4
#silence repeating messages
mute 20
#Windows specific
win-sys 'env'
route-method exe
route-delay 2
Лог
Mon Apr 22 14:44:30 2013 us=921000 Current Parameter Settings:
Mon Apr 22 14:44:30 2013 us=921000 config = 'HideME.ru Canada, Montreal.ovpn'
Mon Apr 22 14:44:30 2013 us=921000 mode = 0
Mon Apr 22 14:44:30 2013 us=921000 show_ciphers = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 show_digests = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 show_engines = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 genkey = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 key_pass_file = '[UNDEF]'
Mon Apr 22 14:44:30 2013 us=921000 show_tls_ciphers = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 Connection profiles [default]:
Mon Apr 22 14:44:30 2013 us=921000 proto = tcp-client
Mon Apr 22 14:44:30 2013 us=921000 local = '[UNDEF]'
Mon Apr 22 14:44:30 2013 us=921000 local_port = 0
Mon Apr 22 14:44:30 2013 us=921000 remote = '142.4.223.230'
Mon Apr 22 14:44:30 2013 us=921000 remote_port = 443
Mon Apr 22 14:44:30 2013 us=921000 remote_float = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 bind_defined = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 bind_local = DISABLED
Mon Apr 22 14:44:30 2013 us=921000 connect_retry_seconds = 5
Mon Apr 22 14:44:30 2013 us=921000 connect_timeout = 10
Mon Apr 22 14:44:30 2013 us=921000 NOTE: --mute triggered...
Mon Apr 22 14:44:30 2013 us=921000 255 variation(s) on previous 20 message(s) suppressed by --mute
Mon Apr 22 14:44:30 2013 us=921000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Mon Apr 22 14:44:30 2013 us=921000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Apr 22 14:44:31 2013 us=78000 LZO compression initialized
Mon Apr 22 14:44:31 2013 us=78000 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Apr 22 14:44:31 2013 us=78000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Apr 22 14:44:31 2013 us=78000 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Apr 22 14:44:31 2013 us=78000 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Apr 22 14:44:31 2013 us=78000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Apr 22 14:44:31 2013 us=78000 Local Options hash (VER=V4): '31fdf004'
Mon Apr 22 14:44:31 2013 us=78000 Expected Remote Options hash (VER=V4): '3e6d1056'
Mon Apr 22 14:44:31 2013 us=78000 Attempting to establish TCP connection with 142.4.223.230:443
Mon Apr 22 14:44:31 2013 us=328000 TCP connection established with 142.4.223.230:443
Mon Apr 22 14:44:31 2013 us=328000 TCPv4_CLIENT link local: [undef]
Mon Apr 22 14:44:31 2013 us=328000 TCPv4_CLIENT link remote: 142.4.223.230:443
Mon Apr 22 14:44:31 2013 us=578000 TLS: Initial packet from 142.4.223.230:443, sid=42e7a06a d384e9b2
Mon Apr 22 14:44:36 2013 us=781000 VERIFY OK: depth=1, /C=DE/ST=Bayern/L=Gunzenhausen/O=HideME/CN=HideME_CA/emailAddress=feedback@hideme.ru
Mon Apr 22 14:44:36 2013 us=781000 VERIFY OK: nsCertType=SERVER
Mon Apr 22 14:44:36 2013 us=781000 VERIFY OK: depth=0, /C=DE/ST=Bayern/L=Gunzenhausen/O=HideME/CN=server/emailAddress=feedback@hideme.ru
Mon Apr 22 14:44:48 2013 us=562000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 22 14:44:48 2013 us=562000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 22 14:44:48 2013 us=562000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 22 14:44:48 2013 us=562000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 22 14:44:48 2013 us=562000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Apr 22 14:44:48 2013 us=562000 [server] Peer Connection Initiated with 142.4.223.230:443
Mon Apr 22 14:44:51 2013 us=15000 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Apr 22 14:44:51 2013 us=687000 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.97.192.1,ping 10,ping-restart 30,ifconfig 10.97.253.30 255.224.0.0'
Mon Apr 22 14:44:51 2013 us=687000 OPTIONS IMPORT: timers and/or timeouts modified
Mon Apr 22 14:44:51 2013 us=687000 OPTIONS IMPORT: --ifconfig/up options modified
Mon Apr 22 14:44:51 2013 us=687000 OPTIONS IMPORT: route-related options modified
Mon Apr 22 14:44:51 2013 us=687000 ROUTE default_gateway=192.168.1.1
Mon Apr 22 14:44:51 2013 us=703000 TAP-WIN32 device [Подключение по локальной сети 22] opened: \\.\Global\{F4027970-4F23-498F-9C59-47892230D3E3}.tap
Mon Apr 22 14:44:51 2013 us=703000 TAP-Win32 Driver Version 9.9
Mon Apr 22 14:44:51 2013 us=703000 TAP-Win32 MTU=1500
Mon Apr 22 14:44:51 2013 us=703000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.97.253.30/255.224.0.0 on interface {F4027970-4F23-498F-9C59-47892230D3E3} [DHCP-serv: 10.96.0.0, lease-time: 31536000]
Mon Apr 22 14:44:51 2013 us=703000 DHCP option string: 06040808 0808
Mon Apr 22 14:44:51 2013 us=703000 Successful ARP Flush on interface [196611] {F4027970-4F23-498F-9C59-47892230D3E3}
Mon Apr 22 14:44:53 2013 us=62000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:44:53 2013 us=62000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:44:55 2013 us=140000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:44:55 2013 us=140000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:44:56 2013 us=953000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:44:56 2013 us=953000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:44:58 2013 us=46000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:44:58 2013 us=46000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:44:59 2013 us=125000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:44:59 2013 us=125000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:00 2013 us=953000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:00 2013 us=953000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:02 2013 us=46000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:02 2013 us=46000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:03 2013 us=93000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:03 2013 us=93000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:04 2013 us=125000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:04 2013 us=125000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:05 2013 us=171000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:05 2013 us=171000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:06 2013 us=218000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:06 2013 us=218000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:07 2013 us=265000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:07 2013 us=265000 Route: Waiting for TUN/TAP interface to come up...
Mon Apr 22 14:45:08 2013 us=312000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Mon Apr 22 14:45:08 2013 us=312000 Route: Waiting for TUN/TAP interface to come up...
Никакие настроек после установки опенвпн больше не менял, да и этот конфиг давался впн сервисом. На вин 7 всё работает нормально. |
Всего записей: 7 | Зарегистр. 09-07-2008 | Отправлено: 14:41 22-04-2013 | Исправлено: zlobin21, 14:48 22-04-2013 |
|
, спасибо за наводку! Только не auth_user_pass а auth-user-pass тогда уж
