Hello
I have ASG 220 and ASG 425 I configured the Site 2 Site Using SSL Protocol
but i don't know it's not working it was working fine with V7 but now with V8 is not working is there anything I missed
here is the Configuration
On ASG 425
Connection Type : Server
Connection Name: Test VPN
Local Network : Internal Network
Rmote Network : other Branch Network
Automatic Packet Filter Rule: Checked
I download the File and I sent to the guy at the Bnach office
he did these setting as below
on ASG 220
Connection Type : Client
Connection Name: Test VPN
he uploaded the file that i sent
checked on Automatic Packet Filter rules
but the connection doesn't establesh
here is the log for ASG 425 "Server"
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: MULTI: multi_create_instance called
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: Re-using SSL/TLS context
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: LZO compression initialized
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: Local Options hash (VER=V4): '28786345'
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: Expected Remote Options hash (VER=V4): '30b70586'
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: TCP connection established with 94.96.55.89:53615
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: Socket Buffers: R=[131072->131072] S=[131072->131072]
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: TCPv4_SERVER link local: [undef]
2010:10:07-18:58:02 Riyadh-ASG openvpn[7243]: TCPv4_SERVER link remote: 94.96.55.89:53615
2010:10:07-18:58:03 Riyadh-ASG openvpn[7243]: 94.96.55.89:53615 TLS: Initial packet from 94.96.55.89:53615, sid=cb930249 65da77ad
2010:10:07-18:58:04 Riyadh-ASG openvpn[7243]: 94.96.55.89:53615 Connection reset, restarting [0]
2010:10:07-18:58:04 Riyadh-ASG openvpn[7243]: 94.96.55.89:53615 SIGUSR1[soft,connection-reset] received, client-instance restarting
2010:10:07-18:58:04 Riyadh-ASG openvpn[7243]: TCP/UDP: Closing socket
and here is the Logs for the Branch ASG 220 "Client"
2010:10:07-17:51:09 Jeddah_ASG openvpn[6380]: Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
2010:10:07-17:51:09 Jeddah_ASG openvpn[6380]: Local Options hash (VER=V4): '30b70586'
2010:10:07-17:51:09 Jeddah_ASG openvpn[6380]: Expected Remote Options hash (VER=V4): '28786345'
2010:10:07-17:51:09 Jeddah_ASG openvpn[6380]: Attempting to establish TCP connection with 94.97.18.73:443 [nonblock]
2010:10:07-17:51:10 Jeddah_ASG openvpn[6380]: TCP connection established with 94.97.18.73:443
2010:10:07-17:51:10 Jeddah_ASG openvpn[6380]: Socket Buffers: R=[87380->131072] S=[16384->131072]
2010:10:07-17:51:10 Jeddah_ASG openvpn[6380]: TCPv4_CLIENT link local: [undef]
2010:10:07-17:51:10 Jeddah_ASG openvpn[6380]: TCPv4_CLIENT link remote: 94.97.18.73:443
2010:10:07-17:51:10 Jeddah_ASG openvpn[6380]: TLS: Initial packet from 94.97.18.73:443, sid=684cb526 04c5d8ea
2010:10:07-17:51:10 Jeddah_ASG openvpn[6380]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: VERIFY ERROR: depth=1, error=certificate has expired: /C=sa/L=Riyadh/O=Safari/CN=Safari_VPN_CA/emailAddress=thanga@***i.com
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: TLS Error: TLS object -> incoming plaintext read error
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: TLS Error: TLS handshake failed
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: Fatal TLS error (check_tls_errors_co), restarting
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: TCP/UDP: Closing socket
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: SIGHUP[soft,tls-error] received, process restarting
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: OpenVPN 2.1.1 i686-suse-linux [SSL] [LZO2] [EPOLL] built on May 17 2010
2010:10:07-17:51:11 Jeddah_ASG openvpn[6380]: Restart pause, 10 second(s)
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: LZO compression initialized
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: Local Options hash (VER=V4): '30b70586'
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: Expected Remote Options hash (VER=V4): '28786345'
2010:10:07-17:51:21 Jeddah_ASG openvpn[6380]: Attempting to establish TCP connection with 94.97.18.73:443 [nonblock]
2010:10:07-17:51:22 Jeddah_ASG openvpn[6380]: TCP connection established with 94.97.18.73:443
2010:10:07-17:51:22 Jeddah_ASG openvpn[6380]: Socket Buffers: R=[87380->131072] S=[16384->131072]
2010:10:07-17:51:22 Jeddah_ASG openvpn[6380]: TCPv4_CLIENT link local: [undef]
2010:10:07-17:51:22 Jeddah_ASG openvpn[6380]: TCPv4_CLIENT link remote: 94.97.18.73:443
2010:10:07-17:51:22 Jeddah_ASG openvpn[6380]: TLS: Initial packet from 94.97.18.73:443, sid=e7765d15 6ab53e22
This thread was automatically locked due to age.
