pfsense som openvpn server

[xzibiz]

Har en pfsense server som står som ruter/brannmur bak altibox sin zyxel ruter.

Pfsense boksen står i dmz i zyxel ruteren.

 

Har satt opp openvpn serveren etter å ha fulgt flere videoer og guider på nettet. Hvor alle egentlig viste det samme.

 

Men har problemer med å koble til.

 

Server.conf:

dev ovpns2
dev-type tun
dev-node /dev/tun2
writepid /var/run/openvpn_server2.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 192.168.10.101
tls-server
server 172.0.2.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc
username-as-common-name
auth-user-pass-verify /var/etc/openvpn/server2.php via-env
tls-verify /var/etc/openvpn/server2.tls-verify.php
lport 4160
management /var/etc/openvpn/server2.sock unix
max-clients 10
push "route 172.0.0.0 255.240.0.0"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
ca /var/etc/openvpn/server2.ca
cert /var/etc/openvpn/server2.cert
key /var/etc/openvpn/server2.key
dh /etc/dh-parameters.1024
tls-auth /var/etc/openvpn/server2.tls-auth 0
persist-remote-ip
float

 

Client fila til windows brukere:

dev tun
persist-tun
persist-key
cipher AES-128-CBC
tls-client
client
resolv-retry infinite
remote MIN WAN IP 4160 udp
tls-remote VPN server Cert
auth-user-pass
pkcs12 pfsense-udp-4160-vpn.p12
tls-auth pfsense-udp-4160-vpn-tls.key 1

 

Port 4160 er godkjent i brannmuren og NAT'et til rett ip. 172.0.2.1 i dette tilfellet.

 

Feilmeldinga som jeg får fra en windows 8 maskin som står en helt annen plass er:

 

Sun Jun 30 21:42:58 2013 DEPRECATED OPTION: --tls-remote, please update your configuration

Sun Jun 30 21:42:58 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Jun 3 2013

Sun Jun 30 21:43:06 2013 Control Channel Authentication: using 'pfsense-udp-4160-vpn-tls.key' as a OpenVPN static key file

Sun Jun 30 21:43:06 2013 UDPv4 link local (bound): [undef]

Sun Jun 30 21:43:06 2013 UDPv4 link remote: [AF_INET]MIN WAN IP:4160

Sun Jun 30 21:44:06 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Sun Jun 30 21:44:06 2013 TLS Error: TLS handshake failed

Sun Jun 30 21:44:06 2013 SIGUSR1[soft,tls-error] received, process restarting

Sun Jun 30 21:44:08 2013 UDPv4 link local (bound): [undef]

Sun Jun 30 21:44:08 2013 UDPv4 link remote: [AF_INET]MIN WAN IP:4160

 

Får derfor ikke koble meg til.

 

Hva har jeg gjort gale ?