Hello,
I use a fiber optic contract with the provider Deutsche Glasfaser. Unfortunately, I no longer have a fixed IPv4 here.
In order to access my internal network, I installed OpenVPN on my NAS. I can also access my NAS from outside using my iPhone and the configuration file. I use a vps and 6tunnel. I have now bought a GL.inet Gl-MT3000. The latest firmware version 4.6.4 is installed. I have uploaded my OpenVPN configuration file here. Unfortunately, I cannot establish a connection.
I am attaching my configuration file and the error log. Can anyone help me?
OpenVPN config:
dev tun
tls-client
dhcp-option DOMAIN fritz.box
remote ip 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
redirect-gateway def1
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
dhcp-option DNS 192.168.178.1
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto tcp-client
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
XXX
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
XXX
-----END CERTIFICATE-----
</ca>
Log
Mon Sep 9 17:29:32 2024 daemon.notice ovpnclient[15498]: Attempting to establish TCP connection with [AF_INET]ip:1194 [nonblock]
Mon Sep 9 17:29:32 2024 daemon.notice ovpnclient[15498]: TCP connection established with [AF_INET]ip:1194
Mon Sep 9 17:29:32 2024 daemon.notice ovpnclient[15498]: TCP_CLIENT link local: (not bound)
Mon Sep 9 17:29:32 2024 daemon.notice ovpnclient[15498]: TCP_CLIENT link remote: [AF_INET]ip:1194
Mon Sep 9 17:29:34 2024 daemon.notice ovpnclient[15498]: [synologyddnsname] Peer Connection Initiated with [AF_INET]ip:1194
Mon Sep 9 17:29:35 2024 daemon.notice ovpnclient[15498]: AUTH: Received control message: AUTH_FAILED
Mon Sep 9 17:29:35 2024 daemon.notice ovpnclient[15498]: SIGTERM[soft,auth-failure] received, process exiting
Mon Sep 9 17:29:40 2024 daemon.notice netifd: Interface 'ovpnclient' is now down
Mon Sep 9 17:29:40 2024 daemon.notice netifd: Interface 'ovpnclient' is setting up now
Mon Sep 9 17:29:40 2024 daemon.warn ovpnclient[15704]: WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: OpenVPN 2.5.3 aarch64-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: library versions: OpenSSL 1.1.1q 5 Jul 2022, LZO 2.10
Mon Sep 9 17:29:40 2024 daemon.warn ovpnclient[15704]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Sep 9 17:29:40 2024 daemon.warn ovpnclient[15704]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: TCP/UDP: Preserving recently used remote address: [AF_INET]ip:1194
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: Attempting to establish TCP connection with [AF_INET]ip:1194 [nonblock]
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: TCP connection established with [AF_INET]ip:1194
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: TCP_CLIENT link local: (not bound)
Mon Sep 9 17:29:40 2024 daemon.notice ovpnclient[15704]: TCP_CLIENT link remote: [AF_INET]ip:1194
Mon Sep 9 17:29:42 2024 daemon.notice ovpnclient[15704]: [synologyddnsname] Peer Connection Initiated with [AF_INET]ip:1194
Now it works. but the speed is slow. I can't open any website.
If I open the OpenVPN config file directly on my phone, I can surf at a reasonable speed.
Hello, at the moment im in spain. my openvpn config works in my router. But I can't access my network at home in Germany.
If I open the openvpn profile in the app on my iPad, everything works and I have access to my network at home in Germany.
Does anyone have any idea what the problem is?
I don't want to install the OpenVPN app on every device so that I can access my network at home. I just want to have the OpenVPN connection opened centrally in the router so that I can access my devices at home from every device.
dev tun
tls-client
dhcp-option DOMAIN fritz.box
remote ip 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
dhcp-option DNS 192.168.178.1
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto tcp-client
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
XXX
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
XXX
-----END CERTIFICATE-----
</ca>