#1 2017-12-21 02:39:56

dzungbb
Trusted Member
Registered: 2017-12-17
Posts: 9

Problem with VPN setting up

Hello.
First of all, I have to tell you that I am a newbie with NAT VPS (I only use shared hosting for web developing purposes).
Few days ago, I decided to buy a NAT VPS to use it as a VPN connection.
I chose to buy 128mb-nat vps from freecpanelsharedhosting, and it is awesome.
Then I followed these steps to set up a open vpn connection:

1. I run the script posted in this thread http://forum.lowendspirit.com/viewtopic.php?id=235:

James wrote:

wget git.io/vpn --no-check-certificate -O openvpn-install.sh; bash openvpn-install.sh

At last step, I got this message:

James wrote:

Your client config is available at ~/client.ovpn

I spent a day searching for instructions on how to download this file but I am still unable to do that.

2. I read this thread http://forum.lowendspirit.com/viewtopic.php?id=702
But there are too many comments and I do not know how to begin.
I suppose that I know what is my IPv6 address, IPv4 address, external IPv4 address and the ports which are allocated to my account.
But then what to do next?

Could anyone please give me an easy-to-follow guide to setup open vpn connection on NAT server?

Many thanks.

Offline

#2 2017-12-21 11:59:10

dks
Trusted Member
Registered: 2015-11-13
Posts: 3

Re: Problem with VPN setting up

dzungbb wrote:

I spent a day searching for instructions on how to download this file but I am still unable to do that.

How about this?

https://youtu.be/R4MdKejZ9eg

Offline

#3 2017-12-21 14:47:26

Pixels
Trusted Member
Registered: 2017-09-15
Posts: 9

Re: Problem with VPN setting up

Just connect with SFTP (ie: FileZilla > Add a connection > Protocol: SFTP - SSH File Transfer Protocol) and enter the external IP, SSH port and login details. You'll be directed to root home folder, where client.ovpn is located.

Offline

#4 2017-12-21 15:20:34

dzungbb
Trusted Member
Registered: 2017-12-17
Posts: 9

Re: Problem with VPN setting up

This is what I got when I use OpenVPN to connect to my NAT:

Thu Dec 21 22:14:28 2017 OpenVPN 2.3.18 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Oct 26 2017
Thu Dec 21 22:14:28 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Dec 21 22:14:28 2017 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Thu Dec 21 22:14:28 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Dec 21 22:14:28 2017 Need hold release from management interface, waiting...
Thu Dec 21 22:14:28 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'state on'
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'log all on'
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'hold off'
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'hold release'
Thu Dec 21 22:14:28 2017 Control Channel Authentication: tls-auth using INLINE static key file
Thu Dec 21 22:14:28 2017 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Dec 21 22:14:28 2017 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Dec 21 22:14:28 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Dec 21 22:14:28 2017 UDPv4 link local: [undef]
Thu Dec 21 22:14:28 2017 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Thu Dec 21 22:14:28 2017 MANAGEMENT: >STATE:1513869268,WAIT,,,
Thu Dec 21 22:15:28 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Dec 21 22:15:28 2017 TLS Error: TLS handshake failed
Thu Dec 21 22:15:28 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Dec 21 22:15:28 2017 MANAGEMENT: >STATE:1513869328,RECONNECTING,tls-error,,

Did I forgot to do anything?

Offline

#5 2017-12-21 18:48:07

Pixels
Trusted Member
Registered: 2017-09-15
Posts: 9

Re: Problem with VPN setting up

dzungbb wrote:

This is what I got when I use OpenVPN to connect to my NAT:

Thu Dec 21 22:14:28 2017 OpenVPN 2.3.18 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Oct 26 2017
Thu Dec 21 22:14:28 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Dec 21 22:14:28 2017 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Thu Dec 21 22:14:28 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Dec 21 22:14:28 2017 Need hold release from management interface, waiting...
Thu Dec 21 22:14:28 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'state on'
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'log all on'
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'hold off'
Thu Dec 21 22:14:28 2017 MANAGEMENT: CMD 'hold release'
Thu Dec 21 22:14:28 2017 Control Channel Authentication: tls-auth using INLINE static key file
Thu Dec 21 22:14:28 2017 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Dec 21 22:14:28 2017 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Dec 21 22:14:28 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Dec 21 22:14:28 2017 UDPv4 link local: [undef]
Thu Dec 21 22:14:28 2017 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Thu Dec 21 22:14:28 2017 MANAGEMENT: >STATE:1513869268,WAIT,,,
Thu Dec 21 22:15:28 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Dec 21 22:15:28 2017 TLS Error: TLS handshake failed
Thu Dec 21 22:15:28 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Dec 21 22:15:28 2017 MANAGEMENT: >STATE:1513869328,RECONNECTING,tls-error,,

Did I forgot to do anything?

I think your network may be filtered and it does not allow OpenVPN connections.

Offline

#6 2017-12-21 20:38:03

manjana
Trusted Member
Registered: 2015-11-23
Posts: 157

Re: Problem with VPN setting up

Thu Dec 21 22:14:28 2017 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Thu Dec 21 22:14:28 2017 MANAGEMENT: >STATE:1513869268,WAIT,,,

If you want to connect to your VPN via IPv4 you need to change the listening port in your server config to one of your NAT ports. You'll also need to change your client config accordingly.

Last edited by manjana (2017-12-21 20:38:19)

Offline

#7 2017-12-22 00:30:21

WSS
Trusted Member
Registered: 2016-12-22
Posts: 404

Re: Problem with VPN setting up

manjana wrote:

Thu Dec 21 22:14:28 2017 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Thu Dec 21 22:14:28 2017 MANAGEMENT: >STATE:1513869268,WAIT,,,

If you want to connect to your VPN via IPv4 you need to change the listening port in your server config to one of your NAT ports. You'll also need to change your client config accordingly.

Precisely this.  On IPv4, you only have the ports given in the email.  Via IPv6, you get them all.  It's a bit of a deal to get IPv6 working with most forks of Nyr's script, so it's easier to just change the port bound to- to one within your range.


RbyeR4Nm.png

Offline

#8 2017-12-22 10:01:04

mikho
Low End Mod
From: Hell and gore == Sweden
Registered: 2013-03-02
Posts: 1,600
Website

Re: Problem with VPN setting up

Some users has also reported that they need to start the OPenVPN client as "administrator" on Windows.

That is you right-click on the icon and select "run as administrator".

Offline

#9 2017-12-22 14:39:18

dzungbb
Trusted Member
Registered: 2017-12-17
Posts: 9

Re: Problem with VPN setting up

manjana wrote:

Thu Dec 21 22:14:28 2017 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Thu Dec 21 22:14:28 2017 MANAGEMENT: >STATE:1513869268,WAIT,,,

If you want to connect to your VPN via IPv4 you need to change the listening port in your server config to one of your NAT ports. You'll also need to change your client config accordingly.

Thanks.
Could you please tell me how to change the listening port in my server config and change the client config?

Offline

#10 2017-12-22 16:08:11

WSS
Trusted Member
Registered: 2016-12-22
Posts: 404

Re: Problem with VPN setting up

Open your config files in a text editor.  The rest should be evident.   If not, use the almighty Google.


RbyeR4Nm.png

Offline

#11 2017-12-24 14:24:09

dzungbb
Trusted Member
Registered: 2017-12-17
Posts: 9

Re: Problem with VPN setting up

WSS wrote:

Open your config files in a text editor.  The rest should be evident.   If not, use the almighty Google.

Wow, I can use my VPN now, hohoho

Offline

Board footer

Powered by FluxBB