|
|
> I'm trieing to setup OpenVPN between my linux (server) and windows
> box.
> The tunnel uses tun on both sides and seperate subnets.
> When i start the VPN on the windows box i get following entries in
> /var/log/ messages and nothing works (no ping):
>
> openvpn[7056]: Peer Connection Initiated with 62.xxx.xxx.xxx:8000
>
> openvpn[7056]: WARNING: Actual Remote Options ('V3,dev-type
> tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,ifconfig 10.7.0.5
> 10.7.0.6,comp-lzo,cipher BF-CBC,auth SHA1,keysize
> 128,tls-client') are inconsistent with Expected Remote Options
> ('V3,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,ifconfig
> 10.7.0.5 10.7.0.6,cipher BF-CBC,auth SHA1,keysize
> 128,tls-client')
Read those actual and expected remote options carefully.
Param Actual Expected
V3 V3
dev-type tun tun
link-mtu 1542 1541
tun-mtu 1500 1500
proto UDPv4 UDPv4
ifconfig 10.7.0.5 10.7.0.5
10.7.0.6 10.7.0.6
(comp) comp-lzo (none)
cipher BF-CBC BF-CBC
auth SHA1 SHA1
keysize 128 128
tls tls-client tls-client
[Maybe OpenVPN could print it out in this format... It would be definedly
easier to spot differencies]
Two differences: link-mtu and comp-lzo.
Link-mtu probably won't cause anything bad, but if other end compresses data
and other one doesn't then it won't work.
Fix: add comp-lzo to windows box conf file
Anssi Kolehmainen
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users
|