PDA

View Full Version : OpenVPN on the Diamond


jblanz
7th August 2008, 02:03 PM
Dear all

I was wondering if anybody got OpenVPN to run on the D. I am trying to connect to a server at home via GPRS/3G using a tap device (bridging). I was trying version 2.1.0 of the OpenVPN port from ziggurat29 (http://ovpnppc.ziggurat29.com/ovpnppc-files.htm). The Installation of the GUI and the openvpn client work fine. The GUI (ovpncmgr) starts up OK and also seems to start a tap device TAP1. When I try to start a VPN client with a config file that I tested on the desktop before (except for different path settings and settings for the managment interface), it takes some time (get the typical GSM noise in my PC's speaker... so there is traffic over the air) and then a new VPN tab is displayed on the GUI. However the connection does not show up in the list of VPN instances. In the VPN tab I cannot get the status of the connection etc. Also, I cannot get any logging to work (no log file is created). On the server side I am not getting anything at all. No packets reach the server.

I am running out of ideas what could be wrong. Could it be the connection via T-Mobile? I am able to ping the server from the D, so I thought this should not be a problem. I also tried different ports (1194 and 443). Same result.

If anybody has a clue what I need to do, I appreciated any help.

Here is my client config file:

client
proto tcp-client
port 443
remote my.openvpnserv.net 443
ns-cert-type server
dev tap
resolv-retry infinite
nobind
persist-key
persist-tun
ca "\\Programme\\OpenVPN\\config\\ca.crt"
cert "\\Programme\\OpenVPN\\config\\client4.crt"
key "\\Programme\\OpenVPN\\config\\client4.key"
log "\\Programme\\OpenVPN\\log\\client4.log"
service openvpn_exit_1
management 127.0.0.1 10000
conmgr "MyTMO" 1
comp-lzo
verb 4


After all the tap interface seems still be available and no IP is configured for it. What is really annoying is that I am not even getting a log file

jjb

lepermessiah
15th September 2008, 11:32 PM
I'm having exactly the same problem..OpenVPN starts, but it doesn't show any instance...

Marsian-CZ
18th September 2008, 04:01 PM
Hi there.
Do you use OpenVPN client with TF3D active??? I installed it and then I tried to run connection manager. But nothing happend. The manager seems not running. Maybe it's because of the TF3D. Any idea??? Thanks....

mgrcasa
18th September 2008, 05:57 PM
Hi,

After many days (and night) trying to make this thing work, I finally managed to make it work.
This is how I setup my server and client:

DSL Box =======> Linksys WRT54G =======> Home PC as server (XP)
Public IP ethernet 192.168.1.1 ethernet 192.168.1.10
Address

Server Script:
proto tcp
port 443
dev tap
dev-node OpenVPN
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
ifconfig-pool-persist ipp.txt
server-bridge 192.168.1.199 255.255.255.0 192.168.1.210 192.168.1.220
push “dhcp-option DNS 192.168.1.1”
keepalive 10 120
comp-lzo
cipher AES-256-CBC
max-clients 10
persist-key
persist-tun
keepalive 10 60
status openvpn-status.log
verb 3

Client script:

client
dev tap
proto tcp
#Here your server's Public address + listening port
remote xxxxxxx.homeip.net 443
nobind
resolv-retry infinite
persist-key
persist-tun
cipher AES-256-CBC
comp-lzo
ca "\\ca.crt"
cert "\\htc1.crt"
key "\\htc1.key"
ping 15
ping-restart 120
verb 0
redirect-gateway
route-method exe
route-delay 2
# This is French SFR proxy
http-proxy 195.115.25.129 8080
http-proxy-option AGENT "Vodafone/1.0/HTC_Diamond/1.37.163.4"


On the server I created a bridge between the ethernet connection (192.168.1.10) and the TAP device that I renamed 'OpenVPN'.
I then manually modified its TCP/IP address with the following:
IP address : 192.168.1.199
Netmask : 255.255.255.0
Gateway : 192.168.1.1 (the Linksys router)
Primary DNS Server : 192.168.1.1
Secondary DNS : your provider DNS will do.


On the client (Diamond):
After installing the software, certificates and keys I modified the TAP device giving it manually its IP address:
Start>>Parameters>>Connections>>WiFi>>Network Cards

IP Address : 192.168.1.210
Netmask : 255.255.255.0
Gateway : 192.168.1.1

If you have a router you need to forward port 443 to the bridge address (192.168.1.199).

Thats all folks. Hope it works for you too.

samueltkc
31st October 2008, 07:26 PM
Hi there.
Do you use OpenVPN client with TF3D active??? I installed it and then I tried to run connection manager. But nothing happend. The manager seems not running. Maybe it's because of the TF3D. Any idea??? Thanks....

Ah... just go to 'Today' in Settings and disable the TF3D... click on the task bar!