PiVPN setup issues Announcing the arrival of Valued Associate #679: Cesar Manara ...
What adaptations would allow standard fantasy dwarves to survive in the desert?
Universal covering space of the real projective line?
retrieve food groups from food item list
Google .dev domain strangely redirects to https
Moving a wrapfig vertically to encroach partially on a subsection title
GDP with Intermediate Production
How can a team of shapeshifters communicate?
If Windows 7 doesn't support WSL, then what is "Subsystem for UNIX-based Applications"?
Relating to the President and obstruction, were Mueller's conclusions preordained?
How to force a browser when connecting to a specific domain to be https only using only the client machine?
Why complex landing gears are used instead of simple,reliability and light weight muscle wire or shape memory alloys?
What does 丫 mean? 丫是什么意思?
Is it dangerous to install hacking tools on my private linux machine?
What is the difference between CTSS and ITS?
How much damage would a cupful of neutron star matter do to the Earth?
Should a wizard buy fine inks every time he want to copy spells into his spellbook?
Why are vacuum tubes still used in amateur radios?
Special flights
Would color changing eyes affect vision?
Can you force honesty by using the Speak with Dead and Zone of Truth spells together?
How can I prevent/balance waiting and turtling as a response to cooldown mechanics
The Nth Gryphon Number
Does silver oxide react with hydrogen sulfide?
Central Vacuuming: Is it worth it, and how does it compare to normal vacuuming?
PiVPN setup issues
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 23, 2019 at 23:30 UTC (7:30pm US/Eastern)
Come Celebrate our 10 Year Anniversary!Problems setting up a VPN: can connect but can't ping anyoneOpenVPN connection from within 2nd subnet in office?openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)Strange OpenVPN behavior - disconnects after one minuteWhy “Connection reset by peer” when i'm trying to connect to server in OpenVPN?Configuring OpenVPN server (Debian 8) and client (Windows 10)openvpn - Options error: --client-config-dir failstls error : tls handshake failedOpenVPN Client Local LAN AccessHow to configure iptables for a dial-up VPN with OpenVPN and two interfaces?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:
CONNECTION_TIMEOUT ERR
I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.
Running the command
pivpn -d
Creates the following log file:
::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
bd6a1e1 b75b36f Author: james-lasersoft
<37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
22:23:03 2019 -0500
Merge pull request #716 from jamfrade/patch-1
Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::
/etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
extensions.temp index.txt index.txt.attr index.txt.attr.old
index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
renewed revoked safessl-easyrsa.cnf serial serial.old ta.key
/etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem
/etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
server_aLdaaHpdOCAmdyox.crt
/etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
server_aLdaaHpdOCAmdyox.key
/etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:
/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:
/etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:
/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
:: Output of /etc/pivpn/* :: ::: ::: :: START
/etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
:: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
/etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
:: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
:: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
:: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
:: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
:: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
/etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
persist-key persist-tun remote-cert-tls server tls-version-min 1.2
verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
::: :::
To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.
Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.
vpn openvpn
add a comment |
I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:
CONNECTION_TIMEOUT ERR
I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.
Running the command
pivpn -d
Creates the following log file:
::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
bd6a1e1 b75b36f Author: james-lasersoft
<37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
22:23:03 2019 -0500
Merge pull request #716 from jamfrade/patch-1
Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::
/etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
extensions.temp index.txt index.txt.attr index.txt.attr.old
index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
renewed revoked safessl-easyrsa.cnf serial serial.old ta.key
/etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem
/etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
server_aLdaaHpdOCAmdyox.crt
/etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
server_aLdaaHpdOCAmdyox.key
/etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:
/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:
/etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:
/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
:: Output of /etc/pivpn/* :: ::: ::: :: START
/etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
:: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
/etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
:: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
:: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
:: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
:: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
:: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
/etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
persist-key persist-tun remote-cert-tls server tls-version-min 1.2
verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
::: :::
To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.
Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.
vpn openvpn
add a comment |
I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:
CONNECTION_TIMEOUT ERR
I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.
Running the command
pivpn -d
Creates the following log file:
::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
bd6a1e1 b75b36f Author: james-lasersoft
<37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
22:23:03 2019 -0500
Merge pull request #716 from jamfrade/patch-1
Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::
/etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
extensions.temp index.txt index.txt.attr index.txt.attr.old
index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
renewed revoked safessl-easyrsa.cnf serial serial.old ta.key
/etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem
/etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
server_aLdaaHpdOCAmdyox.crt
/etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
server_aLdaaHpdOCAmdyox.key
/etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:
/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:
/etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:
/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
:: Output of /etc/pivpn/* :: ::: ::: :: START
/etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
:: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
/etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
:: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
:: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
:: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
:: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
:: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
/etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
persist-key persist-tun remote-cert-tls server tls-version-min 1.2
verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
::: :::
To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.
Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.
vpn openvpn
I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:
CONNECTION_TIMEOUT ERR
I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.
Running the command
pivpn -d
Creates the following log file:
::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
bd6a1e1 b75b36f Author: james-lasersoft
<37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
22:23:03 2019 -0500
Merge pull request #716 from jamfrade/patch-1
Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::
/etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
extensions.temp index.txt index.txt.attr index.txt.attr.old
index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
renewed revoked safessl-easyrsa.cnf serial serial.old ta.key
/etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem
/etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
server_aLdaaHpdOCAmdyox.crt
/etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
server_aLdaaHpdOCAmdyox.key
/etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:
/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:
/etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial
/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:
/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
:: Output of /etc/pivpn/* :: ::: ::: :: START
/etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
:: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
/etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
:: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
:: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
:: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
:: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
:: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
/etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
persist-key persist-tun remote-cert-tls server tls-version-min 1.2
verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
::: :::
To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.
Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.
vpn openvpn
vpn openvpn
asked 12 mins ago
Dan382Dan382
1416
1416
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963931%2fpivpn-setup-issues%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963931%2fpivpn-setup-issues%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown