Hello All
I have ASG120 , Remote VPN is activated , there are some users defined on it , every thing was working fine unless something happened
I could connect remotely using Astaro SSL VPN Client
But with errors !! i couldnt access my server ,
please find below :
Wed Jul 28 12:52:41 2010 OpenVPN 2.1.1 i686-pc-cygwin [SSL] [LZO2] built on May 7 2010
Wed Jul 28 12:52:45 2010 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Wed Jul 28 12:52:45 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 28 12:52:46 2010 LZO compression initialized
Wed Jul 28 12:52:46 2010 Control Channel MTU parms [ L:1556 D:130 EF:40 EB:0 ET:0 EL:0 ]
Wed Jul 28 12:52:46 2010 Data Channel MTU parms [ L:1556 D:1350 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 28 12:52:46 2010 Local Options hash (VER=V4): '619088b2'
Wed Jul 28 12:52:46 2010 Expected Remote Options hash (VER=V4): 'a4f12474'
Wed Jul 28 12:52:46 2010 Attempting to establish TCP connection with 77.44.174.141:443
Wed Jul 28 12:52:46 2010 TCP connection established with 77.44.174.119:443
Wed Jul 28 12:52:46 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 28 12:52:46 2010 TCPv4_CLIENT link local: [undef]
Wed Jul 28 12:52:46 2010 TCPv4_CLIENT link remote: 77.44.174.119:443
Wed Jul 28 12:52:46 2010 TLS: Initial packet from 77.44.174.119:443, sid=8aa8348d 5d5926b1
Wed Jul 28 12:52:46 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jul 28 12:53:18 2010 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Wed Jul 28 12:53:18 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 28 12:53:18 2010 Re-using SSL/TLS context
Wed Jul 28 12:53:18 2010 LZO compression initialized
Wed Jul 28 12:53:18 2010 Control Channel MTU parms [ L:1556 D:134 EF:40 EB:0 ET:0 EL:0 ]
Wed Jul 28 12:53:18 2010 Data Channel MTU parms [ L:1556 D:1359 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 28 12:53:18 2010 Local Options hash (VER=V4): '619088b2'
Wed Jul 28 12:53:18 2010 Expected Remote Options hash (VER=V4): 'a4f12474'
Wed Jul 28 12:55:41 2010 TCP connection established with 77.44.174.141:443
Wed Jul 28 12:55:41 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 28 12:55:41 2010 TCPv4_CLIENT link local: [undef]
Wed Jul 28 12:55:41 2010 TCPv4_CLIENT link remote: 77.44.174.119:443
Wed Jul 28 12:55:41 2010 TLS: Initial packet from 77.44.174.119:443, sid=eb179e8a 37eb2ced
Wed Jul 28 12:55:41 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jul 28 12:55:42 2010 VERIFY OK: depth=1, /C=sy/L=damascus/O=FMS-tech/CN=FMS-tech_VPN_CA/emailAddress=slidd@fms-tech.com
Wed Jul 28 12:55:42 2010 VERIFY X509NAME OK: /C=sy/L=damascus/O=FMS-tech/CN=ASG120/emailAddress=slidd@fms-tech.com
Wed Jul 28 12:55:42 2010 VERIFY OK: depth=0, /C=sy/L=damascus/O=FMS-tech/CN=ASG120/emailAddress=slidd@fms-tech.com
Wed Jul 28 12:55:46 2010 Data Channel Encrypt: Cipher 'AES-128-CGC' initialized with 128 bit key
Wed Jul 28 12:55:46 2010 Data Channel Encrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Wed Jul 28 12:55:46 2010 Data Channel Decrypt: Cipher 'AES-128-CGC' initialized with 128 bit key
Wed Jul 28 12:55:46 2010 Data Channel Decrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Wed Jul 28 12:55:46 2010 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jul 28 12:55:46 2010 [ASG120] Peer Connection Initiated with 77.44.174.119:443
Wed Jul 28 12:55:48 2010 SENT CONTROL [ASG120]: 'PUSH_REQUEST' (status=1)
Wed Jul 28 12:55:49 2010 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,dhcp-option DNS 192.168.2.1,dhcp-option DOMAIN fms-tech.com,route 10.242.2.1,topology net30,ping 10,ping-restart 120,ifconfig 10.232.9.6 10.232.9.5'
Wed Jul 28 12:55:49 2010 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 28 12:55:49 2010 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 28 12:55:49 2010 OPTIONS IMPORT: route options modified
Wed Jul 28 12:55:49 2010 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jul 28 12:55:49 2010 ROUTE default_gateway=218.122.231.159
Wed Jul 28 12:55:49 2010 TAP-WIN32 device [Local Area Connection 5] opened: \.\Global\{B64VVD7-19C3-4780-9C5A-0BCFCEED605D}.tap
Wed Jul 28 12:55:49 2010 TAP-Win32 Driver Version 9.6
Wed Jul 28 12:55:49 2010 TAP-Win32 MTU=1500
Wed Jul 28 12:55:49 2010 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.232.9.6/255.255.255.252 on interface {B8CCFBA7-19C3-4780-9C5A-0BCFCDDYH05D} [DHCP-serv: 10.232.9.6, lease-time: 31536000]
Wed Jul 28 12:55:49 2010 NOTE: FlushIpNetTable failed on interface [28] {B8CCFBA7-19C3-4780-9C5A-0BCFCEED605D} (status=5) : Access is denied.
Wed Jul 28 12:55:53 2010 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed Jul 28 12:55:53 2010 C:\WINDOWS\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.232.9.6
Wed Jul 28 12:55:53 2010 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=28]
Wed Jul 28 12:55:53 2010 Route addition via IPAPI failed [adaptive]
Wed Jul 28 12:55:53 2010 Route addition fallback to route.exe
Wed Jul 28 12:55:53 2010 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Jul 28 12:55:53 2010 C:\WINDOWS\system32\route.exe ADD 10.242.2.1 MASK 255.255.255.255 10.232.9.6
Wed Jul 28 12:55:53 2010 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=28]
Wed Jul 28 12:55:53 2010 Route addition via IPAPI failed [adaptive]
Wed Jul 28 12:55:53 2010 Route addition fallback to route.exe
Wed Jul 28 12:55:53 2010 ERROR: Windows route add command failed [adaptive]: returned error code 1
Wed Jul 28 12:55:53 2010 Initialization Sequence Completed
Pls Help pls
This thread was automatically locked due to age.