OPEN VPN

shadow01 · 27. Januar 2015

Hallo Zusammen

Ich wollte heute ein Mal mehr eine VPN einrichten. Diesmal für mich selbst.

Meine HW:
NAS TS-220 - Router Asus RT-AC66U - Test Lap-Top der per SIM-Card von aussen zugreifen soll.

Im Nas habe ich folgende Einträge:
UDP 1194
max. 5 Clients
AES-256
Redirect-Gatewy
Kompremierte VPN-Verbindung

Im Router ist eine Portweiterleitung des Ports 1194 auf die lokale IP des Server eingerichtet

Auf dem Lap-Top zum Test ist der Firewall disabled und folgendes im Configfile hinterlegt.

Code

clientdev tunscript-security 3proto udpremote  EXTERNE_IP  1194resolv-retry infinitenobindca ca.crtauth-user-passreneg-sec 0cipher AES-256-CBCcomp-lzoauth-nocache

Ich Poste hier mal mein Verb 7 Level leider habe ich gerade keine Ahnung mehr wo der Fehler liegt. Seltsam find ich das es aber funktioniert wenn ich im lokalen Netz versuche eine VPN auf die lokale IP aufzubauen. Der Router müsste eigentlich alle nötigen Funktionen erfüllen.

Code

Tue Jan 27 21:26:36 2015 us=208795 Current Parameter Settings:
Tue Jan 27 21:26:36 2015 us=208795   config = 'openvpn.ovpn'
Tue Jan 27 21:26:36 2015 us=208795   mode = 0
Tue Jan 27 21:26:36 2015 us=208795   show_ciphers = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   show_digests = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   show_engines = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   genkey = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   key_pass_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   show_tls_ciphers = DISABLED
Tue Jan 27 21:26:36 2015 us=208795 Connection profiles [default]:
Tue Jan 27 21:26:36 2015 us=208795   proto = udp
Tue Jan 27 21:26:36 2015 us=208795   local = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   local_port = 0
Tue Jan 27 21:26:36 2015 us=208795   remote = 'xx.xxx.xxx.xxx'
Tue Jan 27 21:26:36 2015 us=208795   remote_port = 1194
Tue Jan 27 21:26:36 2015 us=208795   remote_float = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   bind_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   bind_local = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   connect_retry_seconds = 5
Tue Jan 27 21:26:36 2015 us=208795   connect_timeout = 10
Tue Jan 27 21:26:36 2015 us=208795   connect_retry_max = 0
Tue Jan 27 21:26:36 2015 us=208795   socks_proxy_server = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   socks_proxy_port = 0
Tue Jan 27 21:26:36 2015 us=208795   socks_proxy_retry = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   tun_mtu = 1500
Tue Jan 27 21:26:36 2015 us=208795   tun_mtu_defined = ENABLED
Tue Jan 27 21:26:36 2015 us=208795   link_mtu = 1500
Tue Jan 27 21:26:36 2015 us=208795   link_mtu_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   tun_mtu_extra = 0
Tue Jan 27 21:26:36 2015 us=208795   tun_mtu_extra_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   mtu_discover_type = -1
Tue Jan 27 21:26:36 2015 us=208795   fragment = 0
Tue Jan 27 21:26:36 2015 us=208795   mssfix = 1450
Tue Jan 27 21:26:36 2015 us=208795   explicit_exit_notification = 0
Tue Jan 27 21:26:36 2015 us=208795 Connection profiles END
Tue Jan 27 21:26:36 2015 us=208795   remote_random = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   ipchange = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   dev = 'tun'
Tue Jan 27 21:26:36 2015 us=208795   dev_type = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   dev_node = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   lladdr = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   topology = 1
Tue Jan 27 21:26:36 2015 us=208795   tun_ipv6 = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_local = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_remote_netmask = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_noexec = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_nowarn = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_ipv6_local = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_ipv6_netbits = 0
Tue Jan 27 21:26:36 2015 us=208795   ifconfig_ipv6_remote = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   shaper = 0
Tue Jan 27 21:26:36 2015 us=208795   mtu_test = 0
Tue Jan 27 21:26:36 2015 us=208795   mlock = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   keepalive_ping = 0
Tue Jan 27 21:26:36 2015 us=208795   keepalive_timeout = 0
Tue Jan 27 21:26:36 2015 us=208795   inactivity_timeout = 0
Tue Jan 27 21:26:36 2015 us=208795   ping_send_timeout = 0
Tue Jan 27 21:26:36 2015 us=208795   ping_rec_timeout = 0
Tue Jan 27 21:26:36 2015 us=208795   ping_rec_timeout_action = 0
Tue Jan 27 21:26:36 2015 us=208795   ping_timer_remote = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   remap_sigusr1 = 0
Tue Jan 27 21:26:36 2015 us=208795   persist_tun = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   persist_local_ip = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   persist_remote_ip = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   persist_key = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   passtos = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   resolve_retry_seconds = 1000000000
Tue Jan 27 21:26:36 2015 us=208795   username = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   groupname = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   chroot_dir = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   cd_dir = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   writepid = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   up_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   down_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   down_pre = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   up_restart = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   up_delay = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   daemon = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   inetd = 0
Tue Jan 27 21:26:36 2015 us=208795   log = ENABLED
Tue Jan 27 21:26:36 2015 us=208795   suppress_timestamps = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   nice = 0
Tue Jan 27 21:26:36 2015 us=208795   verbosity = 7
Tue Jan 27 21:26:36 2015 us=208795   mute = 0
Tue Jan 27 21:26:36 2015 us=208795   status_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   status_file_version = 1
Tue Jan 27 21:26:36 2015 us=208795   status_file_update_freq = 60
Tue Jan 27 21:26:36 2015 us=208795   occ = ENABLED
Tue Jan 27 21:26:36 2015 us=208795   rcvbuf = 0
Tue Jan 27 21:26:36 2015 us=208795   sndbuf = 0
Tue Jan 27 21:26:36 2015 us=208795   sockflags = 0
Tue Jan 27 21:26:36 2015 us=208795   fast_io = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   lzo = 7
Tue Jan 27 21:26:36 2015 us=208795   route_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   route_default_gateway = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   route_default_metric = 0
Tue Jan 27 21:26:36 2015 us=208795   route_noexec = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   route_delay = 5
Tue Jan 27 21:26:36 2015 us=208795   route_delay_window = 30
Tue Jan 27 21:26:36 2015 us=208795   route_delay_defined = ENABLED
Tue Jan 27 21:26:36 2015 us=208795   route_nopull = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   route_gateway_via_dhcp = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   max_routes = 100
Tue Jan 27 21:26:36 2015 us=208795   allow_pull_fqdn = DISABLED
Tue Jan 27 21:26:36 2015 us=208795   management_addr = '127.0.0.1'
Tue Jan 27 21:26:36 2015 us=208795   management_port = 25340
Tue Jan 27 21:26:36 2015 us=208795   management_user_pass = 'stdin'
Tue Jan 27 21:26:36 2015 us=208795   management_log_history_cache = 250
Tue Jan 27 21:26:36 2015 us=208795   management_echo_buffer_size = 100
Tue Jan 27 21:26:36 2015 us=208795   management_write_peer_info_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   management_client_user = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   management_client_group = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   management_flags = 6
Tue Jan 27 21:26:36 2015 us=208795   shared_secret_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=208795   key_direction = 0
Tue Jan 27 21:26:36 2015 us=208795   ciphername_defined = ENABLED
Tue Jan 27 21:26:36 2015 us=208795   ciphername = 'AES-256-CBC'
Tue Jan 27 21:26:36 2015 us=208795   authname_defined = ENABLED
Tue Jan 27 21:26:36 2015 us=208795   authname = 'SHA1'
Tue Jan 27 21:26:36 2015 us=208795   prng_hash = 'SHA1'
Tue Jan 27 21:26:36 2015 us=224395   prng_nonce_secret_len = 16
Tue Jan 27 21:26:36 2015 us=224395   keysize = 0
Tue Jan 27 21:26:36 2015 us=224395   engine = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   replay = ENABLED
Tue Jan 27 21:26:36 2015 us=224395   mute_replay_warnings = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   replay_window = 64
Tue Jan 27 21:26:36 2015 us=224395   replay_time = 15
Tue Jan 27 21:26:36 2015 us=224395   packet_id_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   use_iv = ENABLED
Tue Jan 27 21:26:36 2015 us=224395   test_crypto = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   tls_server = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   tls_client = ENABLED
Tue Jan 27 21:26:36 2015 us=224395   key_method = 2
Tue Jan 27 21:26:36 2015 us=224395   ca_file = 'ca.crt'
Tue Jan 27 21:26:36 2015 us=224395   ca_path = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   dh_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   cert_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   priv_key_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   pkcs12_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   cryptoapi_cert = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   cipher_list = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   tls_verify = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   tls_export_cert = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   verify_x509_type = 0
Tue Jan 27 21:26:36 2015 us=224395   verify_x509_name = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   crl_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   ns_cert_type = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_ku[i] = 0
Tue Jan 27 21:26:36 2015 us=224395   remote_cert_eku = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   ssl_flags = 0
Tue Jan 27 21:26:36 2015 us=224395   tls_timeout = 2
Tue Jan 27 21:26:36 2015 us=224395   renegotiate_bytes = 0
Tue Jan 27 21:26:36 2015 us=224395   renegotiate_packets = 0
Tue Jan 27 21:26:36 2015 us=224395   renegotiate_seconds = 0
Tue Jan 27 21:26:36 2015 us=224395   handshake_window = 60
Tue Jan 27 21:26:36 2015 us=224395   transition_window = 3600
Tue Jan 27 21:26:36 2015 us=224395   single_session = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   push_peer_info = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   tls_exit = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   tls_auth_file = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_protected_authentication = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_private_mode = 00000000
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_cert_private = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_pin_cache_period = -1
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_id = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=224395   pkcs11_id_management = DISABLED
Tue Jan 27 21:26:36 2015 us=224395   server_network = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=224395   server_netmask = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   server_network_ipv6 = ::
Tue Jan 27 21:26:36 2015 us=239995   server_netbits_ipv6 = 0
Tue Jan 27 21:26:36 2015 us=239995   server_bridge_ip = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   server_bridge_netmask = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   server_bridge_pool_start = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   server_bridge_pool_end = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_pool_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_pool_start = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_pool_end = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_pool_netmask = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_pool_persist_refresh_freq = 600
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_ipv6_pool_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_ipv6_pool_base = ::
Tue Jan 27 21:26:36 2015 us=239995   ifconfig_ipv6_pool_netbits = 0
Tue Jan 27 21:26:36 2015 us=239995   n_bcast_buf = 256
Tue Jan 27 21:26:36 2015 us=239995   tcp_queue_limit = 64
Tue Jan 27 21:26:36 2015 us=239995   real_hash_size = 256
Tue Jan 27 21:26:36 2015 us=239995   virtual_hash_size = 256
Tue Jan 27 21:26:36 2015 us=239995   client_connect_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=239995   learn_address_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=239995   client_disconnect_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=239995   client_config_dir = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=239995   ccd_exclusive = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   tmp_dir = 'C:\Users\ADMINI~1\AppData\Local\Temp\'
Tue Jan 27 21:26:36 2015 us=239995   push_ifconfig_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   push_ifconfig_local = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jan 27 21:26:36 2015 us=239995   push_ifconfig_ipv6_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   push_ifconfig_ipv6_local = ::/0
Tue Jan 27 21:26:36 2015 us=239995   push_ifconfig_ipv6_remote = ::
Tue Jan 27 21:26:36 2015 us=239995   enable_c2c = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   duplicate_cn = DISABLED
Tue Jan 27 21:26:36 2015 us=239995   cf_max = 0
Tue Jan 27 21:26:36 2015 us=255595   cf_per = 0
Tue Jan 27 21:26:36 2015 us=255595   max_clients = 1024
Tue Jan 27 21:26:36 2015 us=255595   max_routes_per_client = 256
Tue Jan 27 21:26:36 2015 us=255595   auth_user_pass_verify_script = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=255595   auth_user_pass_verify_script_via_file = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   client = ENABLED
Tue Jan 27 21:26:36 2015 us=255595   pull = ENABLED
Tue Jan 27 21:26:36 2015 us=255595   auth_user_pass_file = 'stdin'
Tue Jan 27 21:26:36 2015 us=255595   show_net_up = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   route_method = 0
Tue Jan 27 21:26:36 2015 us=255595   ip_win32_defined = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   ip_win32_type = 3
Tue Jan 27 21:26:36 2015 us=255595   dhcp_masq_offset = 0
Tue Jan 27 21:26:36 2015 us=255595   dhcp_lease_time = 31536000
Tue Jan 27 21:26:36 2015 us=255595   tap_sleep = 0
Tue Jan 27 21:26:36 2015 us=255595   dhcp_options = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   dhcp_renew = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   dhcp_pre_release = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   dhcp_release = DISABLED
Tue Jan 27 21:26:36 2015 us=255595   domain = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=255595   netbios_scope = '[UNDEF]'
Tue Jan 27 21:26:36 2015 us=255595   netbios_node_type = 0
Tue Jan 27 21:26:36 2015 us=255595   disable_nbt = DISABLED
Tue Jan 27 21:26:36 2015 us=255595 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Tue Jan 27 21:26:36 2015 us=255595 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Tue Jan 27 21:26:36 2015 us=255595 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Jan 27 21:26:36 2015 us=255595 Need hold release from management interface, waiting...
Tue Jan 27 21:26:36 2015 us=427195 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Jan 27 21:26:36 2015 us=536396 MANAGEMENT: CMD 'state on'
Tue Jan 27 21:26:36 2015 us=536396 MANAGEMENT: CMD 'log all on'
Tue Jan 27 21:26:36 2015 us=676796 MANAGEMENT: CMD 'hold off'
Tue Jan 27 21:26:36 2015 us=676796 MANAGEMENT: CMD 'hold release'
Tue Jan 27 21:26:41 2015 us=668805 MANAGEMENT: CMD 'username "Auth" "fm7777777"'
Tue Jan 27 21:26:41 2015 us=684405 MANAGEMENT: CMD 'password [...]'
Tue Jan 27 21:26:41 2015 us=684405 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Jan 27 21:26:41 2015 us=856005 LZO compression initialized
Tue Jan 27 21:26:41 2015 us=856005 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jan 27 21:26:41 2015 us=856005 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jan 27 21:26:41 2015 us=856005 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 27 21:26:41 2015 us=856005 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Jan 27 21:26:41 2015 us=856005 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Jan 27 21:26:41 2015 us=887205 Local Options hash (VER=V4): '22188c5b'
Tue Jan 27 21:26:41 2015 us=887205 Expected Remote Options hash (VER=V4): 'a8f55717'
Tue Jan 27 21:26:41 2015 us=887205 UDPv4 link local: [undef]
Tue Jan 27 21:26:41 2015 us=887205 UDPv4 link remote: [AF_INET]xx.xxx.xxx.xxx:1194
Tue Jan 27 21:26:41 2015 us=887205 MANAGEMENT: >STATE:1422390401,WAIT,,,
Tue Jan 27 21:26:41 2015 us=887205 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:26:41 2015 us=887205 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Tue Jan 27 21:26:43 2015 us=946409 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:26:47 2015 us=35214 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:26:55 2015 us=958430 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:27:12 2015 us=73258 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:27:41 2015 us=744510 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jan 27 21:27:41 2015 us=744510 TLS Error: TLS handshake failed
Tue Jan 27 21:27:41 2015 us=744510 TCP/UDP: Closing socket
Tue Jan 27 21:27:41 2015 us=744510 SIGUSR1[soft,tls-error] received, process restarting
Tue Jan 27 21:27:41 2015 us=744510 MANAGEMENT: >STATE:1422390461,RECONNECTING,tls-error,,
Tue Jan 27 21:27:41 2015 us=744510 Restart pause, 2 second(s)
Tue Jan 27 21:27:43 2015 us=772514 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Jan 27 21:27:43 2015 us=772514 LZO compression initialized
Tue Jan 27 21:27:43 2015 us=772514 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jan 27 21:27:43 2015 us=772514 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jan 27 21:27:43 2015 us=772514 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 27 21:27:43 2015 us=772514 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Jan 27 21:27:43 2015 us=772514 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Jan 27 21:27:43 2015 us=772514 Local Options hash (VER=V4): '22188c5b'
Tue Jan 27 21:27:43 2015 us=772514 Expected Remote Options hash (VER=V4): 'a8f55717'
Tue Jan 27 21:27:43 2015 us=772514 UDPv4 link local: [undef]
Tue Jan 27 21:27:43 2015 us=772514 UDPv4 link remote: [AF_INET]xx.xxx.xxx.xxx:1194
Tue Jan 27 21:27:43 2015 us=772514 MANAGEMENT: >STATE:1422390463,WAIT,,,
Tue Jan 27 21:27:43 2015 us=772514 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:27:43 2015 us=772514 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Tue Jan 27 21:27:45 2015 us=20516 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:27:50 2015 us=12525 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:27:58 2015 us=748540 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:28:14 2015 us=176967 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:28:43 2015 us=676619 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jan 27 21:28:43 2015 us=676619 TLS Error: TLS handshake failed
Tue Jan 27 21:28:43 2015 us=676619 TCP/UDP: Closing socket
Tue Jan 27 21:28:43 2015 us=676619 SIGUSR1[soft,tls-error] received, process restarting
Tue Jan 27 21:28:43 2015 us=676619 MANAGEMENT: >STATE:1422390523,RECONNECTING,tls-error,,
Tue Jan 27 21:28:43 2015 us=676619 Restart pause, 2 second(s)
Tue Jan 27 21:28:45 2015 us=704622 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Jan 27 21:28:45 2015 us=704622 LZO compression initialized
Tue Jan 27 21:28:45 2015 us=704622 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jan 27 21:28:45 2015 us=704622 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jan 27 21:28:45 2015 us=704622 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 27 21:28:45 2015 us=704622 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Jan 27 21:28:45 2015 us=704622 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Jan 27 21:28:45 2015 us=704622 Local Options hash (VER=V4): '22188c5b'
Tue Jan 27 21:28:45 2015 us=704622 Expected Remote Options hash (VER=V4): 'a8f55717'
Tue Jan 27 21:28:45 2015 us=704622 UDPv4 link local: [undef]
Tue Jan 27 21:28:45 2015 us=704622 UDPv4 link remote: [AF_INET]xx.xxx.xxx.xxx:1194
Tue Jan 27 21:28:45 2015 us=704622 MANAGEMENT: >STATE:1422390525,WAIT,,,
Tue Jan 27 21:28:45 2015 us=704622 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:28:45 2015 us=704622 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Tue Jan 27 21:28:48 2015 us=13426 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:28:52 2015 us=631035 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:29:00 2015 us=462248 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:29:16 2015 us=982677 UDPv4 WRITE [14] to [AF_INET]xx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 27 21:29:22 2015 us=161886 TCP/UDP: Closing socket
Tue Jan 27 21:29:22 2015 us=161886 SIGTERM[hard,] received, process exiting
Tue Jan 27 21:29:22 2015 us=161886 MANAGEMENT: >STATE:1422390562,EXITING,SIGTERM,,
Tue Jan 27 21:29:22 2015 us=161886 PKCS#11: Terminating openssl
Tue Jan 27 21:29:22 2015 us=161886 PKCS#11: Removing providers
Tue Jan 27 21:29:22 2015 us=161886 PKCS#11: Releasing sessions
Tue Jan 27 21:29:22 2015 us=161886 PKCS#11: Terminating slotevent
Tue Jan 27 21:29:22 2015 us=161886 PKCS#11: Marking as uninitialized

Alles anzeigen

Gruss und Danke Frank

GreyAngel · 28. Januar 2015

OK. Da fehlen noch ein paar Informationen (wenn ich ohne Kaffee richtig geguckt habe)...

Hast Du Dir eine DynDNS-Adresse eingerichtet oder sprichst Du die WAN-IP an?
Hast Du im Router auch wirklich Port 1194 UDP weitergeleitet oder versehentlich TCP?
Hast Du IPv4 oder IPv6? Was nutzt die Gegenstelle für ein Protokoll?

LG

shadow01 · 28. Januar 2015

Hallo GreyAngel

Zuerst habe ich es mit dem originalen File des QNAP's versucht da steht die cloud Adresse drin welche anscheinend richtig aufgelöst wird. Zum Testen habe ich aber die WAN IP eingesetzt.
Ja ich habe den Router per UPnP konfiguriert und danach das UPnP auf dem Router wieder disables und den Eintrag in der Portforwarding-Seite kontrolliert.
Ich nutze IPv4.

Gruss und Danke

OPEN VPN

Vulnerability in Download Station

Vulnerability in QuLog Center

Vulnerability in Helpdesk

Vulnerability in curl

Antivirus - 'Suche gestoppt'

Datenträgerverschlüsselung sicher?

Kein Zugriff mehr auf TS-259 Pro+

SambaCry on QNAP NAS

FRAGE: Malware Remover läuft seit Stunden bei 70%. Ist das normal?

Tschüss QTS --- Ich werde künftig die Firmware von QNAP verweigern

(Betriebs)- System vs. Systemvolume - Hinweise zum Verständnis

Backup vom Smartphone (Android) mit FolderSync

QuDedup: Backup Job neu verlinken - Ein Ritt ins Verderben

Qnap & Syno – USV im Master-Slave-Mode

Kodi-Headless Server als Docker-Container

Hardware Praxis – „Hör mal wer da surrt“: Ein Erfahrungsbericht aus dem IT-Alltag

Hardware Praxis – Tipps zum Einbau einer neuen Festplatte: Ergänzung

Foren Update im Juli / August geplant

IT-Geschichten – Die verrückte Tastatur