PiVPN setup issues Announcing the arrival of Valued Associate #679: Cesar Manara ...

What adaptations would allow standard fantasy dwarves to survive in the desert?

Universal covering space of the real projective line?

retrieve food groups from food item list

Google .dev domain strangely redirects to https

Moving a wrapfig vertically to encroach partially on a subsection title

GDP with Intermediate Production

How can a team of shapeshifters communicate?

If Windows 7 doesn't support WSL, then what is "Subsystem for UNIX-based Applications"?

Relating to the President and obstruction, were Mueller's conclusions preordained?

How to force a browser when connecting to a specific domain to be https only using only the client machine?

Why complex landing gears are used instead of simple,reliability and light weight muscle wire or shape memory alloys?

What does 丫 mean? 丫是什么意思?

Is it dangerous to install hacking tools on my private linux machine?

What is the difference between CTSS and ITS?

How much damage would a cupful of neutron star matter do to the Earth?

Should a wizard buy fine inks every time he want to copy spells into his spellbook?

Why are vacuum tubes still used in amateur radios?

Special flights

Would color changing eyes affect vision?

Can you force honesty by using the Speak with Dead and Zone of Truth spells together?

How can I prevent/balance waiting and turtling as a response to cooldown mechanics

The Nth Gryphon Number

Does silver oxide react with hydrogen sulfide?

Central Vacuuming: Is it worth it, and how does it compare to normal vacuuming?



PiVPN setup issues



Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 23, 2019 at 23:30 UTC (7:30pm US/Eastern)
Come Celebrate our 10 Year Anniversary!Problems setting up a VPN: can connect but can't ping anyoneOpenVPN connection from within 2nd subnet in office?openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)Strange OpenVPN behavior - disconnects after one minuteWhy “Connection reset by peer” when i'm trying to connect to server in OpenVPN?Configuring OpenVPN server (Debian 8) and client (Windows 10)openvpn - Options error: --client-config-dir failstls error : tls handshake failedOpenVPN Client Local LAN AccessHow to configure iptables for a dial-up VPN with OpenVPN and two interfaces?





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:



CONNECTION_TIMEOUT ERR



I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.



Running the command



pivpn -d


Creates the following log file:




::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
bd6a1e1 b75b36f Author: james-lasersoft
<37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
22:23:03 2019 -0500



Merge pull request #716 from jamfrade/patch-1

Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::


/etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
extensions.temp index.txt index.txt.attr index.txt.attr.old
index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
renewed revoked safessl-easyrsa.cnf serial serial.old ta.key



/etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem



/etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
server_aLdaaHpdOCAmdyox.crt



/etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
server_aLdaaHpdOCAmdyox.key



/etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial



/etc/openvpn/easy-rsa/pki/renewed/private_by_serial:



/etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:



/etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial



/etc/openvpn/easy-rsa/pki/revoked/private_by_serial:



/etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
:: Output of /etc/pivpn/* :: ::: ::: :: START
/etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
:: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
/etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
:: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
:: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
:: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
:: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
:: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
/etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
persist-key persist-tun remote-cert-tls server tls-version-min 1.2
verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
::: :::




To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.



Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.










share|improve this question





























    0















    I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:



    CONNECTION_TIMEOUT ERR



    I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.



    Running the command



    pivpn -d


    Creates the following log file:




    ::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
    ::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
    bd6a1e1 b75b36f Author: james-lasersoft
    <37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
    22:23:03 2019 -0500



    Merge pull request #716 from jamfrade/patch-1

    Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::


    /etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
    extensions.temp index.txt index.txt.attr index.txt.attr.old
    index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
    renewed revoked safessl-easyrsa.cnf serial serial.old ta.key



    /etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem



    /etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
    server_aLdaaHpdOCAmdyox.crt



    /etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
    server_aLdaaHpdOCAmdyox.key



    /etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial



    /etc/openvpn/easy-rsa/pki/renewed/private_by_serial:



    /etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:



    /etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial



    /etc/openvpn/easy-rsa/pki/revoked/private_by_serial:



    /etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
    :: Output of /etc/pivpn/* :: ::: ::: :: START
    /etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
    :: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
    /etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
    END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
    :: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
    END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
    :: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
    :: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
    IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
    pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
    DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
    :: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
    :: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
    /etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
    proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
    persist-key persist-tun remote-cert-tls server tls-version-min 1.2
    verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
    SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
    ::: :::




    To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.



    Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.










    share|improve this question

























      0












      0








      0








      I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:



      CONNECTION_TIMEOUT ERR



      I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.



      Running the command



      pivpn -d


      Creates the following log file:




      ::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
      ::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
      bd6a1e1 b75b36f Author: james-lasersoft
      <37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
      22:23:03 2019 -0500



      Merge pull request #716 from jamfrade/patch-1

      Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::


      /etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
      extensions.temp index.txt index.txt.attr index.txt.attr.old
      index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
      renewed revoked safessl-easyrsa.cnf serial serial.old ta.key



      /etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem



      /etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
      server_aLdaaHpdOCAmdyox.crt



      /etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
      server_aLdaaHpdOCAmdyox.key



      /etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial



      /etc/openvpn/easy-rsa/pki/renewed/private_by_serial:



      /etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:



      /etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial



      /etc/openvpn/easy-rsa/pki/revoked/private_by_serial:



      /etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
      :: Output of /etc/pivpn/* :: ::: ::: :: START
      /etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
      :: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
      /etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
      END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
      :: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
      END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
      :: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
      :: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
      IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
      pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
      DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
      :: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
      :: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
      /etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
      proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
      persist-key persist-tun remote-cert-tls server tls-version-min 1.2
      verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
      SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
      ::: :::




      To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.



      Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.










      share|improve this question














      I've installed PiVPN per the instructions on their site. It's a business connection (static IP) through a SmartHub (latest version). Per the instructions I've setup port forwarding in the routers firewall settings. I've also run PiVPN's debug and can't see any issues. However when connecting via OpenVPN (MacOS and iOS) I get the following error:



      CONNECTION_TIMEOUT ERR



      I assume this means the port forwarding isn't working, however I've followed BT's instructions and everything seems correct. I've also tried enabling the routers DMZ mode and tried port locking, but both had no impact.



      Running the command



      pivpn -d


      Creates the following log file:




      ::: ::: :: PiVPN Debug :: ::: ::: :: Latest Commit ::
      ::: ::: commit 4b4445b4667576f22a01af3dafbb4063218c964f Merge:
      bd6a1e1 b75b36f Author: james-lasersoft
      <37112079+james-lasersoft@users.noreply.github.com> Date: Wed Apr 10
      22:23:03 2019 -0500



      Merge pull request #716 from jamfrade/patch-1

      Fix Easy-RSA install ::: ::: :: Recursive list of files in :: :: /etc/openvpn/easy-rsa/pki :: ::: :::


      /etc/openvpn/easy-rsa/pki/: ca.crt crl.pem Default.txt ecparams
      extensions.temp index.txt index.txt.attr index.txt.attr.old
      index.txt.old issued OfficeVPN.ovpn openssl-easyrsa.cnf private
      renewed revoked safessl-easyrsa.cnf serial serial.old ta.key



      /etc/openvpn/easy-rsa/pki/ecparams: prime256v1.pem



      /etc/openvpn/easy-rsa/pki/issued: OfficeVPN.crt
      server_aLdaaHpdOCAmdyox.crt



      /etc/openvpn/easy-rsa/pki/private: ca.key OfficeVPN.key
      server_aLdaaHpdOCAmdyox.key



      /etc/openvpn/easy-rsa/pki/renewed: private_by_serial reqs_by_serial



      /etc/openvpn/easy-rsa/pki/renewed/private_by_serial:



      /etc/openvpn/easy-rsa/pki/renewed/reqs_by_serial:



      /etc/openvpn/easy-rsa/pki/revoked: private_by_serial reqs_by_serial



      /etc/openvpn/easy-rsa/pki/revoked/private_by_serial:



      /etc/openvpn/easy-rsa/pki/revoked/reqs_by_serial: ::: :::
      :: Output of /etc/pivpn/* :: ::: ::: :: START
      /etc/pivpn/DET_PLATFORM :: Raspbian :: END /etc/pivpn/DET_PLATFORM ::
      :: START /etc/pivpn/INSTALL_PORT :: 1194 :: END
      /etc/pivpn/INSTALL_PORT :: :: START /etc/pivpn/INSTALL_PROTO :: udp ::
      END /etc/pivpn/INSTALL_PROTO :: :: START /etc/pivpn/INSTALL_USER :: pi
      :: END /etc/pivpn/INSTALL_USER :: :: START /etc/pivpn/NO_UFW :: 1 ::
      END /etc/pivpn/NO_UFW :: :: START /etc/pivpn/pivpnINTERFACE :: wlan0
      :: END /etc/pivpn/pivpnINTERFACE :: :: START /etc/pivpn/setupVars.conf
      :: pivpnUser=pi UNATTUPG=unattended-upgrades pivpnInterface=wlan0
      IPv4dns=192.168.1.254 IPv4addr=192.168.1.69 IPv4gw=192.168.1.254
      pivpnProto=udp PORT=1194 ENCRYPT=256 APPLY_TWO_POINT_FOUR=true
      DOWNLOAD_DH_PARAM=false PUBLICDNS= OVPNDNS1=8.8.8.8 OVPNDNS2=8.8.4.4
      :: END /etc/pivpn/setupVars.conf :: :: START /etc/pivpn/TWO_POINT_FOUR
      :: :: END /etc/pivpn/TWO_POINT_FOUR :: ::: ::: ::
      /etc/openvpn/easy-rsa/pki/Default.txt :: ::: ::: client dev tun
      proto udp remote 81.133.250.129 1194 resolv-retry infinite nobind
      persist-key persist-tun remote-cert-tls server tls-version-min 1.2
      verify-x509-name server_aLdaaHpdOCAmdyox name cipher AES-256-CBC auth
      SHA256 auth-nocache verb 3 ::: ::: :: Debug Output Complete ::
      ::: :::




      To check if the ports are forwarding I've tried a range of port lookup sites like https://portchecker.co/check, however each reports port 1194 is closed. Not sure if this is reliable however as they also report port 80 is also closed.



      Any advice to diagnose / fix issue would be greatly appreciated. The hardware is a Raspberry Pi 3, connecting via WiFi to the router.







      vpn openvpn






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 12 mins ago









      Dan382Dan382

      1416




      1416






















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963931%2fpivpn-setup-issues%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963931%2fpivpn-setup-issues%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          117736 Шеррод Примітки | Див. також | Посилання | Навігаційне...

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Маріан Котлеба Зміст Життєпис | Політичні погляди |...