OpenVPN Server unable to establish connection

[D_Day]

Can anyone help?

I have tried to setup an OpenVPN server and have followed the instructions but i cannot establish a connection.
I also tried setting one up using PPTP and IPSEC and also could not establish a connection.

Can someone please advise where i might be going wrong?

 

[octopus]

Can anyone help?

I have tried to setup an OpenVPN server and have followed the instructions but i cannot establish a connection.
I also tried setting one up using PPTP and IPSEC and also could not establish a connection.

Can someone please advise where i might be going wrong?

Its i possible to have any suggestion without any data to look at.

 

[D_Day]

Its i possible to have any suggestion without any data to look at.

Does that help?

 

[octopus]

Does server start and What do you connect with?
Turn off password and try connect with only Keys.

 

[D_Day]

I’m trying to connect with OpenVPN client app

Does server start and What do you connect with?

I am trying to connect with OpenVPN client app as advised under the server suggestion.
This is all i get-

I have put the ovpn file in the correct place to.

 

[octopus]

I’m trying to connect with OpenVPN client app

I am trying to connect with OpenVPN client app as advised under the server suggestion.
This is all i get-
View attachment 15715

I have put the ovpn file in the correct place to.

Turn off password and try connect with only Keys.

 

[D_Day]

Turn off password and try connect with only Keys.

I’ve made a school boy error by leaving windows firewall on but that’s now off.
It’s still not connecting even with password off. It’s now saying it doesn’t recognise my ddns hostname

 

[D_Day]

Turn off password and try connect with only Keys.

 

[D_Day]

Turn off password and try connect with only Keys.

I have now got a connection but had to change TLS to static keys to achieve it.

 

[elorimer]

Start with the basics.

1. Is Server1 running on the VPN status page? Just because it is enabled doesn't mean it will start.
2. It looks like in the first effort to connect, you are trying to connect with an ip address, and in the second, with a ddns name. So for the latter, you need to fix the ddns. In the meantime, you could get your WAN address and try to connect with that.
3. If you have access to the router at the same time, look in the syslog. If you are at least making contact with the router, you will see entries even if you are unsuccessful.

Edit: NVM. It looks like you are past these.

 

[D_Day]

Start with the basics.

1. Is Server1 running on the VPN status page? Just because it is enabled doesn't mean it will start.
2. It looks like in the first effort to connect, you are trying to connect with an ip address, and in the second, with a ddns name. So for the latter, you need to fix the ddns. In the meantime, you could get your WAN address and try to connect with that.
3. If you have access to the router at the same time, look in the syslog. If you are at least making contact with the router, you will see entries even if you are unsuccessful.

Edit: NVM. It looks like you are past these.

I have got it running using TUN UDP but with static key, finally!

 

[RMerlin]

"cannot resolve host address" implies a problem with your DDNS. For starter, why is there an "http://" in the address?

 

[D_Day]

"cannot resolve host address" implies a problem with your DDNS. For starter, why is there an "http://" in the address?

I’ve setup a host name using DDNS and asuscomm.com and it works with everything else
It appears to be working at the moment but with static keys

 

[RMerlin]

I’ve setup a host name using DDNS and asuscomm.com and it works with everything else
It appears to be working at the moment but with static keys

Check your ovpn config file and make sure there's just a hostname and not an URL in the remote parameter.

 

[D_Day]

Check your ovpn config file and make sure there's just a hostname and not an URL in the remote parameter.

There’s no URL there, just my hostname.
I can only connect into the server from my laptop at the moment because the phone app won’t let me in

 

[martinr]

Check Merlin’s post and, if you’re not using Asus DDNS, then try that, even if just for troubleshooting. It’s simple to set up and dead reliable.

I see you have “Client will use VpN to access” ser to LAN only. You haven’t given much information so I don’t know what you’re doing, but I’d change that setting to Both, and then, when it’s all working, start altering it to a more restrictive setting, if that’s what you want, and then see if it still eorks.

 

[D_Day]

Check Merlin’s post and, if you’re not using Asus DDNS, then try that, even if just for troubleshooting. It’s simple to set up and dead reliable.

I see you have “Client will use VpN to access” ser to LAN only. You haven’t given much information so I don’t know what you’re doing, but I’d change that setting to Both, and then, when it’s all working, start altering it to a more restrictive setting, if that’s what you want, and then see if it still eorks.

Is there a post on here that is a step by step guide to setting the server up? The Ovpn one is fairly vague

 

[martinr]

Is there a post on here that is a step by step guide to setting the server up? The Ovpn one is fairly vague

Not that I know of, and, if there were, it would slowly get out of date to the point of being misleading/confusing. In any case, compared to how it was just a few years ago, setting up VPN Server is now very simple. For example, you need know nothing about public key infrastructure (certificates and public-private keys) other than it greatly enhances security. Everything is done for you as if by magic and the .ovpn file you generate contains all that’s needed.

So the best advice is, if you're doing it for the first time, or have got into a muddle, set it up in its simplest form and get it working and then change or enhance settings one at a time (bearing in mind there could be some that might need you to export a new .ovpn file; for ezample, one that comes to mind is the default port number, should you eventually want to change it). Then by all means come back to the forum with spefic questions on, for example, a specific setting etc. It doesn’t take long before you become fairly familiar and confident with it, and there’s now no requirement for any deep, under-the-hood knowledge of what’s going on.

That said, there’s no harm in doing a forum search, or an external Google search of the forum for setting up vpn server etc, but I wouldn’t bother much with anything over say 2 or 3 years old. And especially on what certain settings do: there are some very helpful posts in recent times on such topics.

 

[D_Day]

Thanks fo

Not that I know of, and, if there were, it would slowly get out of date to the point of being misleading/confusing. In any case, compared to how it was just a few years ago, setting up VPN Server is now very simple. For example, you need know nothing about public key infrastructure (certificates and public-private keys) other than it greatly enhances security. Everything is done for you as if by magic and the .ovpn file you generate contains all that’s needed.

So the best advice is, if you're doing it for the first time, or have got into a muddle, set it up in its simplest form and get it working and then change or enhance settings one at a time (bearing in mind there could be some that might need you to export a new .ovpn file; for ezample, one that comes to mind is the default port number, should you eventually want to change it). Then by all means come back to the forum with spefic questions on, for example, a specific setting etc. It doesn’t take long before you become fairly familiar and confident with it, and there’s now no requirement for any deep, under-the-hood knowledge of what’s going on.

That said, there’s no harm in doing a forum search, or an external Google search of the forum for setting up vpn server etc, but I wouldn’t bother much with anything over say 2 or 3 years old. And especially on what certain settings do: there are some very helpful posts in recent times on such topics.

Thanks for your help, I have it running in a fashion and I’ll work on it for now.

 

[martinr]

Thanks fo

Thanks for your help, I have it running in a fashion and I’ll work on it for now.

Great. Let us know how it goes and especially if you discover what went wrong: that could be invaluable for somone in a similar position in future