Problem with OpenVPN client

[miickel]

Hi,

I am having some problems when trying to start an OpenVPN client in the merlin firmware (had other problems with the Asus one). The errors seems to be with OpenVPN (maybe my config?), but I was hoping you guys could help me understand the error logs a bit better.

My router is Asus RT68U

Dec 15 12:41:11 rc_service: httpd 503:notify_rc start_vpnclient1
Dec 15 12:41:12 openvpn[4664]: OpenVPN 2.3.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Nov 30 2013
Dec 15 12:41:12 openvpn[4664]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 15 12:41:12 openvpn[4664]: Socket Buffers: R=[116736->131072] S=[116736->131072]
Dec 15 12:41:12 openvpn[4668]: UDPv4 link local: [undef]
Dec 15 12:41:12 openvpn[4668]: UDPv4 link remote: [AF_INET]178.132.75.14:1194
Dec 15 12:41:12 openvpn[4668]: TLS: Initial packet from [AF_INET]178.132.75.14:1194, sid=9ebdfe03 f52231af
Dec 15 12:41:12 openvpn[4668]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Dec 15 12:41:12 openvpn[4668]: VERIFY OK: depth=1, C=RU, ST=Moscow, L=Moscow, O=Azire Networks, OU=VPN, CN=Azire Networks, name=Azire Networks, emailAddress=noc@azire.net
Dec 15 12:41:12 openvpn[4668]: Validating certificate key usage
Dec 15 12:41:12 openvpn[4668]: ++ Certificate has key usage 00a0, expects 00a0
Dec 15 12:41:12 openvpn[4668]: VERIFY KU OK
Dec 15 12:41:12 openvpn[4668]: Validating certificate extended key usage
Dec 15 12:41:12 openvpn[4668]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Dec 15 12:41:12 openvpn[4668]: VERIFY EKU OK
Dec 15 12:41:12 openvpn[4668]: VERIFY OK: depth=0, C=RU, ST=Moscow, L=Moscow, O=AzireVPN, OU=VPN, CN=ovpn, name=ovpn, emailAddress=info@azirevpn.net
Dec 15 12:41:13 openvpn[4668]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Dec 15 12:41:13 openvpn[4668]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 15 12:41:13 openvpn[4668]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Dec 15 12:41:13 openvpn[4668]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 15 12:41:13 openvpn[4668]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Dec 15 12:41:13 openvpn[4668]: [ovpn] Peer Connection Initiated with [AF_INET]178.132.75.14:1194
Dec 15 12:41:15 openvpn[4668]: SENT CONTROL [ovpn]: 'PUSH_REQUEST' (status=1)
Dec 15 12:41:15 openvpn[4668]: PUSH: Received control message: 'PUSH_REPLY,ifconfig-ipv6 2a03:8600:1001:4010::100d/64 2a03:8600:1001:4010::1,route-ipv6 2000::/3 2A03:8600:1001:4010::1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 194.1.247.30,tun-ipv6,route-gateway 178.132.77.1,topology subnet,ping 3,ping-restart 15,ifconfig 178.132.77.15 255.255.255.192'
Dec 15 12:41:15 openvpn[4668]: OPTIONS IMPORT: timers and/or timeouts modified
Dec 15 12:41:15 openvpn[4668]: OPTIONS IMPORT: --ifconfig/up options modified
Dec 15 12:41:15 openvpn[4668]: OPTIONS IMPORT: route options modified
Dec 15 12:41:15 openvpn[4668]: OPTIONS IMPORT: route-related options modified
Dec 15 12:41:15 openvpn[4668]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Dec 15 12:41:15 openvpn[4668]: TUN/TAP device tun11 opened
Dec 15 12:41:15 openvpn[4668]: TUN/TAP TX queue length set to 100
Dec 15 12:41:15 openvpn[4668]: do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=1
Dec 15 12:41:15 openvpn[4668]: /usr/sbin/ip link set dev tun11 up mtu 1500
Dec 15 12:41:15 openvpn[4668]: /usr/sbin/ip addr add dev tun11 178.132.77.15/26 broadcast 178.132.77.63
Dec 15 12:41:15 openvpn[4668]: Linux ip addr add failed: external program exited with error status: 254
Dec 15 12:41:15 openvpn[4668]: Exiting due to fatal error

I've filled in all info from my VPN provider, including CA cert and authentication details.

Any ideas?

Thanks

 

[sinshiva]

server setup incorrectly, try another provider