View all products
Compute
Storage
Networking
Databases
Services
Solutions
Pricing
Library
Technical Resources
Community
Marketplace
What's New
Community ▶ Questions ▶ Trouble with openssh as a vpn and a dd-wrt router
Log in to Ask a Question

Trouble with openssh as a vpn and a dd-wrt router

networking

I currently have openssh set up on a linode, following this guide:

https://www.linode.com/docs/networking/ … d-debian-7">https://www.linode.com/docs/networking/vpn/secure-communications-with-openvpn-on-ubuntu-12-04-precise-and-debian-7

As per the guide's instructions, I am using Tunnelblick on my OS X 10.10 machine at home, and have 0 issues accessing the vpn for access to region restricted sites (Netflix, etc.).

However, I'd like to stop using Tunnelblick and set up the connection through my dd-wrt router so any devices on my home network can do the same.

The router appears to be connecting to the vpn (see attached logs), but a simple visit to http://www.whatismyip.com shows that I am indeed not getting through the vpn.

I'll be happy to post whatever data/logs is needed, I just didn't know what to start, so I've put up my dd-wrt vpn config (with domain/keys blanked) and the vpn log from the router.

OpenVPN config page on router: http://imgur.com/0MigLq4

Router OpenVPN logs:

State
Server: : Local Address: Remote Address: Client: CONNECTED: SUCCESS Local Address: 10.8.0.14 Remote Address: 10.8.0.13

Status

Log
Serverlog Clientlog 20141124 17:51:32 D MANAGEMENT: CMD 'log 500' 
20141124 17:51:32 MANAGEMENT: Client disconnected 
20141124 18:38:06 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141124 18:38:06 D MANAGEMENT: CMD 'state' 
20141124 18:38:06 MANAGEMENT: Client disconnected 
20141124 18:38:06 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141124 18:38:06 D MANAGEMENT: CMD 'state' 
20141124 18:38:06 MANAGEMENT: Client disconnected 
20141124 18:38:06 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141124 18:38:06 D MANAGEMENT: CMD 'state' 
20141124 18:38:06 MANAGEMENT: Client disconnected 
20141124 18:38:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141124 18:38:07 D MANAGEMENT: CMD 'log 500' 
20141124 18:38:07 MANAGEMENT: Client disconnected 
20141124 18:38:17 VERIFY OK: depth=1 C=US ST=TX L=Dallas O=Fort-Funston OU=changeme CN=changeme name=changeme emailAddress=mail@host.domain 
20141124 18:38:17 VERIFY OK: nsCertType=SERVER 
20141124 18:38:17 VERIFY OK: depth=0 C=US ST=CA L=SanFrancisco O=Fort-Funston OU=changeme CN=server name=changeme emailAddress=mail@host.domain 
20141124 18:38:20 NOTE: --mute triggered... 
20141125 07:52:30 134 variation(s) on previous 3 message(s) suppressed by --mute 
20141125 07:52:30 I [server] Inactivity timeout (--ping-restart) restarting 
20141125 07:52:30 I SIGUSR1[soft ping-restart] received process restarting 
20141125 07:52:30 Restart pause 2 second(s) 
20141125 07:52:32 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 
20141125 07:52:32 Socket Buffers: R=[114688->131072] S=[114688->131072] 
20141125 07:52:32 I UDPv4 link local: [undef] 
20141125 07:52:32 I UDPv4 link remote: [AF_INET]{LINODE_IP_ADDRESS}:1194 
20141125 07:52:32 TLS: Initial packet from [AF_INET]{LINODE_IP_ADDRESS}:1194 sid=deef2d46 a961b37e 
20141125 07:52:33 VERIFY OK: depth=1 C=US ST=TX L=Dallas O=Fort-Funston OU=changeme CN=changeme name=changeme emailAddress=mail@host.domain 
20141125 07:52:33 VERIFY OK: nsCertType=SERVER 
20141125 07:52:33 NOTE: --mute triggered... 
20141125 07:52:35 6 variation(s) on previous 3 message(s) suppressed by --mute 
20141125 07:52:35 I [server] Peer Connection Initiated with [AF_INET]{LINODE_IP_ADDRESS}:1194 
20141125 07:52:37 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) 
20141125 07:52:37 PUSH: Received control message: 'PUSH_REPLY route 10.8.0.1 topology net30 ping 10 ping-restart 120 ifconfig 10.8.0.14 10.8.0.13' 
20141125 07:52:37 OPTIONS IMPORT: timers and/or timeouts modified 
20141125 07:52:37 NOTE: --mute triggered... 
20141125 07:52:37 2 variation(s) on previous 3 message(s) suppressed by --mute 
20141125 07:52:37 I Preserving previous TUN/TAP instance: tun1 
20141125 07:52:37 I Initialization Sequence Completed 
20141125 08:52:35 TLS: soft reset sec=0 bytes=37329/0 pkts=711/0 
20141125 08:52:36 VERIFY OK: depth=1 C=US ST=TX L=Dallas O=Fort-Funston OU=changeme CN=changeme name=changeme emailAddress=mail@host.domain 
20141125 08:52:36 VERIFY OK: nsCertType=SERVER 
20141125 08:52:36 NOTE: --mute triggered... 
20141226 23:08:16 7257 variation(s) on previous 3 message(s) suppressed by --mute 
20141226 23:08:16 I [server] Inactivity timeout (--ping-restart) restarting 
20141226 23:08:16 I SIGUSR1[soft ping-restart] received process restarting 
20141226 23:08:16 Restart pause 2 second(s) 
20141226 23:08:18 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 
20141226 23:08:18 Socket Buffers: R=[114688->131072] S=[114688->131072] 
20141226 23:08:18 I UDPv4 link local: [undef] 
20141226 23:08:18 I UDPv4 link remote: [AF_INET]{LINODE_IP_ADDRESS}:1194 
20141226 23:09:18 N TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 
20141226 23:09:18 N TLS Error: TLS handshake failed 
20141226 23:09:18 I SIGUSR1[soft tls-error] received process restarting 
20141226 23:09:18 Restart pause 2 second(s) 
20141226 23:09:20 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 
20141226 23:09:20 Socket Buffers: R=[114688->131072] S=[114688->131072] 
20141226 23:09:20 I UDPv4 link local: [undef] 
20141226 23:09:20 I UDPv4 link remote: [AF_INET]{LINODE_IP_ADDRESS}:1194 
20141226 23:09:20 TLS: Initial packet from [AF_INET]{LINODE_IP_ADDRESS}:1194 sid=6f5fcf79 8e80b75a 
20141226 23:09:22 VERIFY OK: depth=1 C=US ST=TX L=Dallas O=Fort-Funston OU=changeme CN=changeme name=changeme emailAddress=mail@host.domain 
20141226 23:09:22 VERIFY OK: nsCertType=SERVER 
20141226 23:09:22 NOTE: --mute triggered... 
20141226 23:09:24 6 variation(s) on previous 3 message(s) suppressed by --mute 
20141226 23:09:24 I [server] Peer Connection Initiated with [AF_INET]{LINODE_IP_ADDRESS}:1194 
20141226 23:09:26 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) 
20141226 23:09:26 PUSH: Received control message: 'PUSH_REPLY route 10.8.0.1 topology net30 ping 10 ping-restart 120 ifconfig 10.8.0.14 10.8.0.13' 
20141226 23:09:26 OPTIONS IMPORT: timers and/or timeouts modified 
20141226 23:09:26 NOTE: --mute triggered... 
20141226 23:09:26 2 variation(s) on previous 3 message(s) suppressed by --mute 
20141226 23:09:26 I Preserving previous TUN/TAP instance: tun1 
20141226 23:09:26 I Initialization Sequence Completed 
20141227 00:09:24 TLS: soft reset sec=0 bytes=37485/0 pkts=714/0 
20141227 00:09:24 VERIFY OK: depth=1 C=US ST=TX L=Dallas O=Fort-Funston OU=changeme CN=changeme name=changeme emailAddress=mail@host.domain 
20141227 00:09:24 VERIFY OK: nsCertType=SERVER 
20141227 00:09:24 NOTE: --mute triggered... 
20141231 11:21:29 1044 variation(s) on previous 3 message(s) suppressed by --mute 
20141231 11:21:29 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:21:29 D MANAGEMENT: CMD 'state' 
20141231 11:21:29 MANAGEMENT: Client disconnected 
20141231 11:21:29 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:21:29 D MANAGEMENT: CMD 'state' 
20141231 11:21:29 MANAGEMENT: Client disconnected 
20141231 11:21:29 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:21:29 D MANAGEMENT: CMD 'state' 
20141231 11:21:29 MANAGEMENT: Client disconnected 
20141231 11:21:29 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:21:29 D MANAGEMENT: CMD 'log 500' 
20141231 11:21:29 MANAGEMENT: Client disconnected 
20141231 11:29:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:29:05 D MANAGEMENT: CMD 'state' 
20141231 11:29:05 MANAGEMENT: Client disconnected 
20141231 11:29:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:29:05 D MANAGEMENT: CMD 'state' 
20141231 11:29:05 MANAGEMENT: Client disconnected 
20141231 11:29:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:29:05 D MANAGEMENT: CMD 'state' 
20141231 11:29:05 MANAGEMENT: Client disconnected 
20141231 11:29:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16 
20141231 11:29:05 D MANAGEMENT: CMD 'log 500' 
19700101 00:00:00

0 Replies

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Log in to Reply
Community Code of Conduct