Quantcast
Channel: All EdgeRouter posts
Viewing all articles
Browse latest Browse all 60861

Re: OpenVPN - can't ping subnet at one ER-X 1.9.1

$
0
0

/var/log/messages


Site A:

# more /var/log/messages | tail -f
Jan  9 09:47:54 rt111P openvpn[20338]: 98.124.5.101:32889 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jan  9 09:47:54 rt111P openvpn[20338]: 98.124.5.101:32889 [cavan.dyn.rcwconsulting.ca] Peer Connection Initiated with [AF_INET]98.124.5.101:32889
Jan  9 09:47:54 rt111P openvpn[20338]: cavan.dyn.rcwconsulting.ca/98.124.5.101:32889 OPTIONS IMPORT: reading client specific options from: /var/run/openvpn/ccd/vtun0/cavan.dyn.rcwconsulting.ca
Jan  9 09:47:54 rt111P openvpn[20338]: cavan.dyn.rcwconsulting.ca/98.124.5.101:32889 MULTI: Learn: 10.249.47.2 -> cavan.dyn.rcwconsulting.ca/98.124.5.101:32889
Jan  9 09:47:54 rt111P openvpn[20338]: cavan.dyn.rcwconsulting.ca/98.124.5.101:32889 MULTI: primary virtual IP for cavan.dyn.rcwconsulting.ca/98.124.5.101:32889: 10.249.47.2
Jan  9 09:47:57 rt111P openvpn[20338]: cavan.dyn.rcwconsulting.ca/98.124.5.101:32889 PUSH: Received control message: 'PUSH_REQUEST'
Jan  9 09:47:57 rt111P openvpn[20338]: cavan.dyn.rcwconsulting.ca/98.124.5.101:32889 send_push_reply(): safe_cap=940
Jan  9 09:47:57 rt111P openvpn[20338]: cavan.dyn.rcwconsulting.ca/98.124.5.101:32889 SENT CONTROL [cavan.dyn.rcwconsulting.ca]: 'PUSH_REPLY,route-gateway 10.249.47.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.249.47.2 255.255.255.248' (status=1)

Site B:

# more /var/log/messages | tail -n 20
Jan  9 09:47:52 rtCavan openvpn[1859]: TLS: Initial packet from [AF_INET]24.235.150.214:1194, sid=17f04174 c58b018a
Jan  9 09:47:52 rtCavan openvpn[1859]: VERIFY OK: depth=1, C=CA, ST=Ontario, O=vpnserver, CN=vpnserver.dyn.rcwconsulting.ca
Jan  9 09:47:52 rtCavan openvpn[1859]: VERIFY OK: depth=0, C=CA, ST=Ontario, L=Peterborough, O=vpnserver, CN=vpnserver.dyn.rcwconsulting.ca
Jan  9 09:47:54 rtCavan openvpn[1859]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jan  9 09:47:54 rtCavan openvpn[1859]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan  9 09:47:54 rtCavan openvpn[1859]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jan  9 09:47:54 rtCavan openvpn[1859]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan  9 09:47:54 rtCavan openvpn[1859]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jan  9 09:47:54 rtCavan openvpn[1859]: [vpnserver.dyn.rcwconsulting.ca] Peer Connection Initiated with [AF_INET]24.235.150.214:1194
Jan  9 09:47:57 rtCavan openvpn[1859]: SENT CONTROL [vpnserver.dyn.rcwconsulting.ca]: 'PUSH_REQUEST' (status=1)
Jan  9 09:47:57 rtCavan openvpn[1859]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.249.47.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.249.47.2 255.255.255.248'
Jan  9 09:47:57 rtCavan openvpn[1859]: OPTIONS IMPORT: timers and/or timeouts modified
Jan  9 09:47:57 rtCavan openvpn[1859]: OPTIONS IMPORT: --ifconfig/up options modified
Jan  9 09:47:57 rtCavan openvpn[1859]: OPTIONS IMPORT: route-related options modified
Jan  9 09:47:57 rtCavan openvpn[1859]: Preserving previous TUN/TAP instance: vtun0

Do you want the --verb 9 on both sides or just one side? 


Viewing all articles
Browse latest Browse all 60861

Trending Articles