Guten Abend die Damen und Herren.
Ich habe folgendes Szenario:
WindowsXP \ Windows7 Clients, welche mittels Astaro VPN-Client auf unser Netzwerk zugreifen.
Alle XP Clients funktionieren ohne Probleme.
Einige Windows7-Rechner lassen die Verbindung nach Installation des VPN-Clients zu, jedoch nach Neustart des Computers nicht mehr, die Ampel zeigt jedoch grün.
Bei erneuter installation des VPN CLients funktioniert die Verbindung wieder, jedoch wieder nur bis zum Neustart...
Im Log steht folgende Meldung(IP und Domain wurde verändert):
Wed May 11 21:00:43 2011 OpenVPN 2.1_rc22 i686-pc-cygwin [SSL] [LZO2] built on Aug 11 2010
Wed May 11 21:00:54 2011 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Wed May 11 21:00:54 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 11 21:00:54 2011 LZO compression initialized
Wed May 11 21:00:54 2011 Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed May 11 21:00:54 2011 Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 11 21:00:54 2011 Local Options hash (VER=V4): '619088b2'
Wed May 11 21:00:54 2011 Expected Remote Options hash (VER=V4): 'a4f12474'
Wed May 11 21:00:54 2011 Attempting to establish TCP connection with 00.000.00.00:4443
Wed May 11 21:00:54 2011 TCP connection established with 00.000.00.00:4443
Wed May 11 21:00:54 2011 Socket Buffers: R=[8192->8192] S=[64512->64512]
Wed May 11 21:00:54 2011 TCPv4_CLIENT link local: [undef]
Wed May 11 21:00:54 2011 TCPv4_CLIENT link remote: 00.000.00.00:4443
Wed May 11 21:00:54 2011 TLS: Initial packet from 00.000.00.00:4443, sid=8a806c3a 8f36c820
Wed May 11 21:00:54 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed May 11 21:00:55 2011 VERIFY OK: depth=1, /C=ch/L=Olten/O=******/CN=******_VPN_CA/emailAddress=admin@******.ch
Wed May 11 21:00:55 2011 VERIFY X509NAME OK: /C=ch/L=Olten/O=******/CN=asg.******.ch/emailAddress=admin@******.ch
Wed May 11 21:00:55 2011 VERIFY OK: depth=0, /C=ch/L=Olten/O=******/CN=asg.******.ch/emailAddress=admin@******.ch
Wed May 11 21:00:56 2011 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 11 21:00:56 2011 Data Channel Encrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Wed May 11 21:00:56 2011 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 11 21:00:56 2011 Data Channel Decrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Wed May 11 21:00:56 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 11 21:00:56 2011 [asg.******.ch] Peer Connection Initiated with 00.000.00.00:4443
Wed May 11 21:00:58 2011 SENT CONTROL [asg.******.ch]: 'PUSH_REQUEST' (status=1)
Wed May 11 21:00:59 2011 AUTH: Received AUTH_FAILED control message
Wed May 11 21:00:59 2011 TCP/UDP: Closing socket
Wed May 11 21:00:59 2011 SIGTERM[soft,auth-failure] received, process exiting
Wed May 11 21:00:59 2011 OpenVPN 2.1_rc22 i686-pc-cygwin [SSL] [LZO2] built on Aug 11 2010
Wed May 11 21:41:23 2011 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Wed May 11 21:41:23 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 11 21:41:23 2011 LZO compression initialized
Wed May 11 21:41:23 2011 Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed May 11 21:41:23 2011 Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 11 21:41:23 2011 Local Options hash (VER=V4): '619088b2'
Wed May 11 21:41:23 2011 Expected Remote Options hash (VER=V4): 'a4f12474'
Wed May 11 21:41:23 2011 Attempting to establish TCP connection with 00.000.00.00:4443
Wed May 11 21:41:23 2011 TCP connection established with 00.000.00.00:4443
Wed May 11 21:41:23 2011 Socket Buffers: R=[8192->8192] S=[64512->64512]
Wed May 11 21:41:23 2011 TCPv4_CLIENT link local: [undef]
Wed May 11 21:41:23 2011 TCPv4_CLIENT link remote: 00.000.00.00:4443
Wed May 11 21:41:23 2011 TLS: Initial packet from 00.000.00.00:4443, sid=94e4fffe 3d2d1e71
Wed May 11 21:41:23 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed May 11 21:41:23 2011 VERIFY OK: depth=1, /C=ch/L=Olten/O=******/CN=******_VPN_CA/emailAddress=admin@******.ch
Wed May 11 21:41:23 2011 VERIFY X509NAME OK: /C=ch/L=Olten/O=******/CN=asg.******.ch/emailAddress=admin@******.ch
Wed May 11 21:41:23 2011 VERIFY OK: depth=0, /C=ch/L=Olten/O=******/CN=asg.******.ch/emailAddress=admin@******.ch
Wed May 11 21:41:25 2011 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 11 21:41:25 2011 Data Channel Encrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Wed May 11 21:41:25 2011 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 11 21:41:25 2011 Data Channel Decrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Wed May 11 21:41:25 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 11 21:41:25 2011 [asg.******.ch] Peer Connection Initiated with 00.000.00.00:4443
Wed May 11 21:41:27 2011 SENT CONTROL [asg.******.ch]: 'PUSH_REQUEST' (status=1)
Wed May 11 21:41:28 2011 PUSH: Received control message: 'PUSH_REPLY,ifconfig 10.242.2.10 10.242.2.9,ping-restart 120,ping 10,topology net30,route 10.242.2.1,dhcp-option DOMAIN ******.local,dhcp-option DNS 10.0.0.21,dhcp-option DNS 10.0.0.24,route 10.0.0.0 255.255.255.0'
Wed May 11 21:41:28 2011 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 11 21:41:28 2011 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 11 21:41:28 2011 OPTIONS IMPORT: route options modified
Wed May 11 21:41:28 2011 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed May 11 21:41:29 2011 ROUTE default_gateway=192.168.1.1
Wed May 11 21:41:29 2011 TAP-WIN32 device [LAN-Verbindung 2] opened: \.\Global\{098F44D2-1DF3-4C5D-AFC0-3725A878FE54}.tap
Wed May 11 21:41:29 2011 TAP-Win32 Driver Version 9.6
Wed May 11 21:41:29 2011 TAP-Win32 MTU=1500
Wed May 11 21:41:29 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.242.2.10/255.255.255.252 on interface {098F44D2-1DF3-4C5D-AFC0-3725A878FE54} [DHCP-serv: 10.242.2.9, lease-time: 31536000]
Wed May 11 21:41:29 2011 NOTE: FlushIpNetTable failed on interface [17] {098F44D2-1DF3-4C5D-AFC0-3725A878FE54} (status=5) : Zugriff verweigert
Wed May 11 21:41:33 2011 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed May 11 21:41:33 2011 C:\WINDOWS\system32\route.exe ADD 10.242.2.1 MASK 255.255.255.255 10.242.2.9
Wed May 11 21:41:33 2011 ROUTE: route addition failed using CreateIpForwardEntry: Zugriff verweigert [status=5 if_index=17]
Wed May 11 21:41:33 2011 Route addition via IPAPI failed [adaptive]
Wed May 11 21:41:33 2011 Route addition fallback to route.exe
Wed May 11 21:41:34 2011 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed May 11 21:41:34 2011 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.255.255.0 10.242.2.9
Wed May 11 21:41:34 2011 ROUTE: route addition failed using CreateIpForwardEntry: Zugriff verweigert [status=5 if_index=17]
Wed May 11 21:41:34 2011 Route addition via IPAPI failed [adaptive]
Wed May 11 21:41:34 2011 Route addition fallback to route.exe
Wed May 11 21:41:34 2011 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed May 11 21:41:34 2011 Initialization Sequence Completed
Woran kann dies leigen??
Vielen Dank im Vorraus!
This thread was automatically locked due to age.
