how-to block ads
|
-
mikeo1313
@comcast.net | reply to mikeo1313
Re: openvpn vista 64 backslash issue
Thanks for the response but it didn't work. I tried this before & after your post. | |
SoonerAl
Old Enough To Know Better
Premium,MVM
join:2002-07-23
Norman, OK
| reply to mikeo1313
When I last used OpenVPN, quite a long time ago now, I put the client key, ca.crt and ta.key files in the C:\program files\openvpn\config folder on my client so I did not need to use the escape characters. My example client config file then looked like this.
quote:
#
# Customized for SoHo remote access
# Last reviewed - 12 August 2006...awj
#
client
dev tap
proto udp
# The hostname/IP and port of the server.
# Modify for your use.
remote myopenvpn.server.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
# Specific user cert and key file.
# Modify for your use.
cert Vpnuser1.crt
key Vpnuser1.key
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 3
I put the ca.crt, dh1024.pem or dh2048.pem, server.crt and server.key files in the
C:\program files\openvpn\config folder on the server PC. Here is my example server config file.
quote:
#
# Customized for SoHo remote access
# Last reviewed - 12 August 2006...awj
#
proto udp
dev tap
dev-node OpenVPN
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
ifconfig-pool-persist ipp.txt
# Specific to my home LAN...
# »theillustratednetwork.mvps.org/L···kLAN.htm
server-bridge 10.8.0.11 255.255.255.0 10.8.0.31 10.8.0.33
# This tunnels ALL network traffic between server and
# client when the client is connected. See the How-To
# for details - »openvpn.net/howto.html#redirect
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
comp-lzo
tls-auth ta.key 0
cipher AES-256-CBC
max-clients 3
persist-key
persist-tun
status openvpn-status.log
verb 3
These are the bridging instructions that I followed.
»www.pavelec.net/adam/openvpn/bridge
FWIW, here is my small OpenVPN How-To that you may be interested in.
»theillustratednetwork.mvps.org/O···tion.pdf
--
"When all else fails, read the instructions..."
MS-MVP Windows – Desktop User Experience | |
mikeo1313
@comcast.net
| 1. My error msg:
"Options warning: Bad backslash ('\') usage in server.ovpn:1: remember that backslashes are treated as shell-escapes and if you need to pass backslash characters as part of a Windows filename, you should use double backslashes such as "c:\\openvpn\\static.key"
Use --help for more information."
note: I've tried a number of combinations with how to reference the key files including replacing the \\ with \ or / , besides uncommenting the # where there is no use of referencing a folder, just to see. Config files I've seen that were posted to work for someone referenced files similarly as my config file. I even also tried commentiing out lines that reference log files with ;, jik, and still I get the same error stated in quotes above.
2. here is my server config
port 4030
proto udp
dev tap0
dev-node tap-bridge
#ca ca.crt
#cert server.crt
#key server.key
#dh dh1024.pem
ca "C:\\Program Files (x86)\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "C:\\Program Files (x86)\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
ifconfig-pool-persist ipp.txt
server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
server-bridge
client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth "C:\\Program Files (x86)\\OpenVPN\\easy-rsa\\keys\\ta.key 0"
cipher AES-128-CBC
comp-lzo
max-clients 100
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
verb 3
mute 20
;crl-verify crl.pem
3. My procedure & what I did.
-When I installed the v2.1 rc16, I right clicked & ran as adimistrator, jik.
in command prompt I ran
-init-config...
-edited vars.bat default parameters as mentioned in the how to + changed
%programfiles% to %programfiles(x86)%
**vista x64 doesn't install openvpn in its regular program files folder... instead its \program files (x86)\ ,,, the (x86) evironment variable does point to it.
-excecuted vars, clean-all, build-ca, build-key-server server, build-key client1, build-dh & openvpn --genkey --secret ta.key
{ for keys I defaulted all values except common name & committed twice /w y where needed}
-I renamed the tap-win32 adapter v9 to "tap-bridge"
{My main ethernet which I bridged to tap-bridge gets its ip automatically from my d-link router's dhcp. That d-link dhcp is set to give 192.168.0.103 & is associated with its mac. I made sure the newly created bridge had both tap-bridge & local area connection checked in properties.
once bridged. I couldn't ping 192.168.0.103 and ipcondig would show my ip address got assigned to something else in the d-link's dhcp range, within 1 minute vista recognized the change and would be able to access the internet again.}
-I forwarded my udp port. | |
|
