Hey all,
Just wondering if i could get some help setting up my Mikrotik router to connect to my OpenVPN server.
The Basics;
OpenVPN box. US Based, tested working using Windows OpenVPN client, using OpenVPN 2.1.4.
Config:
local ##.##.##.##
port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.240
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher none
#comp-lzo
user nobody
persist-key
persist-tun
log /var/log/openvpn.log
verb 3
Mikrotik Server info RouterOS 3.30
Config:
add add-default-route=no auth=sha1 certificate=client1 cipher=none comment="" connect-to=##.##.##.## disabled=yes mac-address=00:00:00:00:00:00 max-mtu=1500 mode=ip name=\
ovpn-out1 password=mypass port=1194 profile=default user=MyUser
When I attempt the connection i get the following message (on the OpenVPN log), Followed directly by a disconnection as you can see below.
Thu Jan 27 12:43:08 2011 MULTI: multi_create_instance called
Thu Jan 27 12:43:08 2011 Re-using SSL/TLS context
Thu Jan 27 12:43:08 2011 Control Channel MTU parms [ L:1527 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Jan 27 12:43:08 2011 Data Channel MTU parms [ L:1527 D:1450 EF:27 EB:4 ET:0 EL:0 AF:14/27 ]
Thu Jan 27 12:43:08 2011 Local Options hash (VER=V4): '77aaccdd'
Thu Jan 27 12:43:08 2011 Expected Remote Options hash (VER=V4): 'ddaf1b30'
Thu Jan 27 12:43:08 2011 TCP connection established with ##.##.##.##:49706
Thu Jan 27 12:43:08 2011 TCPv4_SERVER link local: [undef]
Thu Jan 27 12:43:08 2011 TCPv4_SERVER link remote: ##.##.##.##:49706
Thu Jan 27 12:43:08 2011 ##.##.##.##:49706 TLS: Initial packet from ##.##.##.##:49706, sid=817d7012 eea4a558
Thu Jan 27 12:43:17 2011 ##.##.##.##:49706 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=me@myhost.mydomain
Thu Jan 27 12:43:17 2011 ##.##.##.##:49706 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=null OU=Private/CN=myuser/name=myuser/emailAddress=myuser@domain.com
Thu Jan 27 12:43:18 2011 ##.##.##.##:49706 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 27 12:43:18 2011 ##.##.##.##:49706 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 27 12:43:19 2011 ##.##.##.##:49706 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 27 12:43:19 2011 ##.##.##.##:49706 [myuser] Peer Connection Initiated with ##.##.##.##:49706
Thu Jan 27 12:43:19 2011 myuser/##.##.##.##:49706 MULTI: Learn: 10.8.0.6 -> myuser/##.##.##.##:49706
Thu Jan 27 12:43:19 2011 myuser/##.##.##.##:49706 MULTI: primary virtual IP for myuser/##.##.##.##:49706: 10.8.0.6
Thu Jan 27 12:43:19 2011 myuser/##.##.##.##:49706 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 27 12:43:19 2011 myuser/##.##.##.##:49706 SENT CONTROL [myuser]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Jan 27 12:43:21 2011 myuser/##.##.##.##:49706 Connection reset, restarting [0]
Thu Jan 27 12:43:21 2011 myuser/##.##.##.##:49706 SIGUSR1[soft,connection-reset] received, client-instance restarting
Within WinBox i get the following errors/message from the log;
ovpn-out1: initializing...
ovpn-out1: dialing...
ovpn-out1: using encoding - SHA1
Then it disconnects and repeats the same messages.
Am i missing something obvious here? I have looked around alot, using the forums/wiki, tried alot of different things, yet i still have no luck in getting a successful connection..
Any help would be greatly appreciated!
