also die PCs hinter der EFW die du erreichen willst sind 192.168.1.0/24 richtig
und der PC der versucht sich einzuwählen per VPN ist im 192.168.0.0/24 richtig
Baust du eine Verb. mit dem Client über WAN auf oder direkt an den OVPN Server von der Endian? ich komme von Ort "A" über WAN auf die Endian wiederum in Ort "B"
also:
Ping von dem entfernten PC funktioniert nicht.
IP vom VPN Endian Server: 192.168.1.1
IP vom VPN Client: 192.168.0.1
jetzt habe ich OpenVPN geschlossen und als Admin ausgeführt. Erneut verbunden jedoch ohne Erfolg:
on Nov 18 15:39:18 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Mon Nov 18 15:39:18 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Nov 18 15:39:18 2013 Need hold release from management interface, waiting...
Mon Nov 18 15:39:18 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Nov 18 15:39:18 2013 MANAGEMENT: CMD 'state on'
Mon Nov 18 15:39:18 2013 MANAGEMENT: CMD 'log all on'
Mon Nov 18 15:39:18 2013 MANAGEMENT: CMD 'hold off'
Mon Nov 18 15:39:18 2013 MANAGEMENT: CMD 'hold release'
Mon Nov 18 15:39:26 2013 MANAGEMENT: CMD 'username "Auth" "daniel"'
Mon Nov 18 15:39:26 2013 MANAGEMENT: CMD 'password [...]'
Mon Nov 18 15:39:26 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Nov 18 15:39:26 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Nov 18 15:39:26 2013 UDPv4 link local: [undef]
Mon Nov 18 15:39:26 2013 UDPv4 link remote: [AF_INET]
Mon Nov 18 15:39:26 2013 MANAGEMENT: >STATE:1384785566,WAIT,,,
Mon Nov 18 15:39:26 2013 MANAGEMENT: >STATE:1384785566,AUTH,,,
Mon Nov 18 15:39:26 2013 TLS: Initial packet from [AF_INET], sid=51f75899 95776abd
Mon Nov 18 15:39:26 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Nov 18 15:39:27 2013 VERIFY OK: depth=1, C=IT, O=efw, CN=efw CA
Mon Nov 18 15:39:27 2013 VERIFY OK: depth=0, C=IT, O=efw, CN=127.0.0.1
Mon Nov 18 15:39:27 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 18 15:39:27 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 18 15:39:27 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 18 15:39:27 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 18 15:39:27 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Nov 18 15:39:27 2013 [127.0.0.1] Peer Connection Initiated with [AF_INET]
Mon Nov 18 15:39:28 2013 MANAGEMENT: >STATE:1384785568,GET_CONFIG,,,
Mon Nov 18 15:39:29 2013 SENT CONTROL [127.0.0.1]: 'PUSH_REQUEST' (status=1)
Mon Nov 18 15:39:29 2013 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.1.1,route-gateway 192.168.1.1,ping 8,ping-restart 30,ifconfig 192.168.1.51 255.255.255.0'
Mon Nov 18 15:39:29 2013 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov 18 15:39:29 2013 OPTIONS IMPORT: --ifconfig/up options modified
Mon Nov 18 15:39:29 2013 OPTIONS IMPORT: route-related options modified
Mon Nov 18 15:39:29 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 18 15:39:29 2013 MANAGEMENT: >STATE:1384785569,ASSIGN_IP,,192.168.1.51,
Mon Nov 18 15:39:29 2013 open_tun, tt->ipv6=0
Mon Nov 18 15:39:29 2013 TAP-WIN32 device [VPN] opened: \\.\Global\{5BFAADD0-957F-42C3-A776-05505D610A83}.tap
Mon Nov 18 15:39:29 2013 TAP-Windows Driver Version 9.9
Mon Nov 18 15:39:29 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.51/255.255.255.0 on interface {5BFAADD0-957F-42C3-A776-05505D610A83} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Mon Nov 18 15:39:29 2013 Successful ARP Flush on interface [20] {5BFAADD0-957F-42C3-A776-05505D610A83}
Mon Nov 18 15:39:34 2013 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Mon Nov 18 15:39:34 2013 Initialization Sequence Completed
Mon Nov 18 15:39:34 2013 MANAGEMENT: >STATE:1384785574,CONNECTED,SUCCESS,192.168.1.51,
Hallo,
gibt es eine Möglichkeit die Geschwindigkeit außerhalb von "http://www.wieistmeineip.de" zu testen?
Würde gerne Down- / Upload und die interne Netzwerkgeschwindigkeit testen.
DIe FW läuft auf einer VM.
sorry, war das falsche Fenster...
Mon Nov 18 15:30:57 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Mon Nov 18 15:30:57 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Nov 18 15:30:57 2013 Need hold release from management interface, waiting...
Mon Nov 18 15:30:58 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Nov 18 15:30:58 2013 MANAGEMENT: CMD 'state on'
Mon Nov 18 15:30:58 2013 MANAGEMENT: CMD 'log all on'
Mon Nov 18 15:30:58 2013 MANAGEMENT: CMD 'hold off'
Mon Nov 18 15:30:58 2013 MANAGEMENT: CMD 'hold release'
Mon Nov 18 15:31:05 2013 MANAGEMENT: CMD 'username "Auth" "XXXX"'
Mon Nov 18 15:31:05 2013 MANAGEMENT: CMD 'password [...]'
Mon Nov 18 15:31:05 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Nov 18 15:31:06 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Nov 18 15:31:06 2013 UDPv4 link local: [undef]
Mon Nov 18 15:31:06 2013 UDPv4 link remote: [AF_INET]XXXXXX
Mon Nov 18 15:31:06 2013 MANAGEMENT: >STATE:1384785066,WAIT,,,
Mon Nov 18 15:31:06 2013 MANAGEMENT: >STATE:1384785066,AUTH,,,
Mon Nov 18 15:31:06 2013 TLS: Initial packet from [AF_INET]XXXXX, sid=70dce90f e496e941
Mon Nov 18 15:31:06 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Nov 18 15:31:06 2013 VERIFY OK: depth=1, C=IT, O=efw, CN=efw CA
Mon Nov 18 15:31:06 2013 VERIFY OK: depth=0, C=IT, O=efw, CN=127.0.0.1
Mon Nov 18 15:31:07 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 18 15:31:07 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 18 15:31:07 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Nov 18 15:31:07 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Nov 18 15:31:07 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Nov 18 15:31:07 2013 [127.0.0.1] Peer Connection Initiated with [AF_INET]XXXXXX
Mon Nov 18 15:31:08 2013 MANAGEMENT: >STATE:1384785068,GET_CONFIG,,,
Mon Nov 18 15:31:09 2013 SENT CONTROL [127.0.0.1]: 'PUSH_REQUEST' (status=1)
Mon Nov 18 15:31:09 2013 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.1.1,route-gateway 192.168.1.1,ping 8,ping-restart 30,ifconfig 192.168.1.51 255.255.255.0'
Mon Nov 18 15:31:09 2013 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov 18 15:31:09 2013 OPTIONS IMPORT: --ifconfig/up options modified
Mon Nov 18 15:31:09 2013 OPTIONS IMPORT: route-related options modified
Mon Nov 18 15:31:09 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Nov 18 15:31:09 2013 MANAGEMENT: >STATE:1384785069,ASSIGN_IP,,192.168.1.51,
Mon Nov 18 15:31:09 2013 open_tun, tt->ipv6=0
Mon Nov 18 15:31:09 2013 TAP-WIN32 device [VPN] opened: \\.\Global\{5BFAADD0-957F-42C3-A776-05505D610A83}.tap
Mon Nov 18 15:31:09 2013 TAP-Windows Driver Version 9.9
Mon Nov 18 15:31:09 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.51/255.255.255.0 on interface {5BFAADD0-957F-42C3-A776-05505D610A83} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Mon Nov 18 15:31:09 2013 NOTE: FlushIpNetTable failed on interface [20] {5BFAADD0-957F-42C3-A776-05505D610A83} (status=5) : Zugriff verweigert
Mon Nov 18 15:31:14 2013 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Mon Nov 18 15:31:14 2013 Initialization Sequence Completed
Mon Nov 18 15:31:14 2013 MANAGEMENT: >STATE:1384785074,CONNECTED,SUCCESS,192.168.1.51,XXXXXXXXXXXXXXXXX
folgender Status habe ich:
Sun Sep 15 16:59:33 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Sun Sep 15 16:59:33 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Sep 15 16:59:33 2013 Need hold release from management interface, waiting...
Sun Sep 15 16:59:34 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Sep 15 16:59:34 2013 MANAGEMENT: CMD 'state on'
Sun Sep 15 16:59:34 2013 MANAGEMENT: CMD 'log all on'
Sun Sep 15 16:59:34 2013 MANAGEMENT: CMD 'hold off'
Sun Sep 15 16:59:34 2013 MANAGEMENT: CMD 'hold release'
Sun Sep 15 16:59:38 2013 MANAGEMENT: CMD 'username "Auth" "XXXXXXXXXXXX"'
Sun Sep 15 16:59:38 2013 MANAGEMENT: CMD 'password XXXXXXXXXXXXXX
Sun Sep 15 16:59:38 2013 MANAGEMENT: CMD XXXXXXXXXXXXXXX
Sun Sep 15 16:59:39 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Sep 15 16:59:39 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 15 16:59:39 2013 MANAGEMENT: >STATE:1379257179,RESOLVE,,,
Sun Sep 15 16:59:39 2013 Attempting to establish TCP connection with [AF_INET]XXXXXXXXXXXXXX
Sun Sep 15 16:59:39 2013 MANAGEMENT: >STATE:1379257179,TCP_CONNECT,,,
Sun Sep 15 17:00:00 2013 SIGTERM[hard,init_instance] received, process exiting
Sun Sep 15 17:00:00 2013 MANAGEMENT: >STATE:1379257200,EXITING,init_instance,,
Kann mir jemand weiter helfen?
Grün und verbunden.
In der endian wird es auch so als verbunden angezeigt.
Firewall ist deaktiviert.
Ping von dem entfernten PC auf z.B eine NAS geht nicht.
Zeitüberschreitung....
Hallo,
ich habe eine VPN Verbindung mittels OpenVpn erstellt.
Kann mich ohne Probleme einloggen.
Jedoch sehen ich dann die anderen PC´s (in der Ferne) nicht im Netzwerk.
Woran kann das liegen?
Liebe Grüße
divemaster2509
