maemo.org - Talk - VPN help

maemo.org - Talk (https://talk.maemo.org/index.php)

- Nokia N800 (https://talk.maemo.org/forumdisplay.php?f=25)

- - VPN help (https://talk.maemo.org/showthread.php?t=9658)

Quote:

Originally Posted by Nealson (Post 76321)

I know I'm very close to getting this set up... I'd appreciate any help. BTW, I'm a linux noob. I'm using xterm. I have root access. Here's what I get after running openvpn --config n800.ovpn

Peer Connection Initiated with 192.168.1.100:1194
Tue Sep 18 17:09:23 2007 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 18 17:09:25 2007 PUSH: Received control message:
'PUSH_REPLY,route 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.10
10.8.0.9'
Tue Sep 18 17:09:25 2007 OPTIONS IMPORT: timers and/or timeouts
modifiedTue Sep 18 17:09:25 2007 OPTIONS IMPORT: --ifconfig/up options
modified
Tue Sep 18 17:09:25 2007 OPTIONS IMPORT: route options modified
Tue Sep 18 17:09:25 2007 Preserving previous TUN/TAP instance: tun3
Tue Sep 18 17:09:25 2007 Initialization Sequence Completed

Now, the "Initialization Sequence Completed" should be good news, right? However, I don't have a '#' prompt after this. Anything I type in has no effect. Is this normal?
I haven't opened the n800 firewall for the tun/tap interface as I did on my server machine (windows). Is there a firewall built into linux or the n800 that I need to do this for? If so, how do I do that?
Also, what is 'tun3'?
Thanks for any help!

Looks like your openvpn tunnel is working just fine, but if you want the command prompt back, then you have to background the process with " &" (that's a space, then ampersand) after your command.

you are on tap3 most likely because you still have other openvpn processes running, each using its own TAP adapter. OpenVPN is great because you can so easily have multiple VPN tunnels running. But in your case, you should stop the openVPN processes with the "killall openvpn" command.

I've had stange, but kind of kice, issues with openvpn on my N800. It seems the VPN tunnels persist (restart) through a reboot. This is odd. Anyone know why?

Ryan ryanwright.org

Quote:

Originally Posted by Tu13es (Post 76099)

I seem to be getting a bunch of "read UPDv4 [ECONNREFUSED]: Connection refused (code=111)

Any ideas?

If you're getting "Connection refused" errors, it means the port in your server's firewall is not open. Did you put the IPTABLES command in the box and click "save firewall" like I mentioned? This will set your firewall to accept packets on UDP port 1194. IF you use another port other than 1194 in your server/client configs, you need to change that firewall command.

Cheers.

Ryan Wright ryanwright.org

First, I'd like to thank for the instructions to get openvpn running. I had followed instructions on many different places, but this was the first time I actually got it working.

I can't seem to redirect the DNS automatically, though. I added

Quote:

push \"dhcp-option DNS 192.168.1.1\"

to the openvpn.conf in the dd-wrt, but the /etc/resolv.conf on my n800 still showed "nameserver 127.0.0.1", even after restarting openvpn on both devices.

I can get around this problem by changing resolv.conf to 192.168.1.1, but I wonder if there isn't anything in openvpn settings that I'm missing that would do this automatically.