[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] Re: Openvpn-users digest, Vol 1 #1121 - 15 msgs


  • Subject: [Openvpn-users] Re: Openvpn-users digest, Vol 1 #1121 - 15 msgs
  • From: David Legg <david@xxxxxxxxxxxxxx>
  • Date: Wed, 12 Jan 2005 23:32:46 +0000

On Wed, 12 Jan 2005 08:28, Andrea Nicolini wrote:
> I'm having similar problems on win2000/2003 servers when the RRAS
> service is running.
> I solved using 'route-method exe' in my config, another potential
> solution can be to disable RRAS and enable routing in windows registry.

You're spot on there - that is the problem. These are my logs:

With Routing and Remote Access enabled:

Wed Jan 12 21:35:10 2005 us=800708 Sleeping for 10 seconds...
Wed Jan 12 21:35:20 2005 us=792733 NOTE: FlushIpNetTable failed on
interface [2]
{880195E7-CD82-47BA-9286-0D42970FE4D0} (status=1413) : Invalid index.
Wed Jan 12 21:35:20 2005 us=794231 route ADD 192.168.0.0 MASK
255.255.255.0 192.168.0.2

Without Routing and Remote Access enabled:

Wed Jan 12 23:14:50 2005 us=855884 Successful ARP Flush on interface
[2] {880195E7-CD82-47BA-9286-0D42970FE4D0}
Wed Jan 12 23:14:50 2005 us=857273 route ADD 192.168.0.0 MASK
255.255.255.0 192.168.0.2

That's the only error I can see anywhere - everything else seems to be fine. 
Since I don't actually need the RRA enabled I've just disabled it. I 
certainly don't need the IPSec VPN in RRA up and running!

Thank you James Yonan. After several days of some pretty inexplicable 
Windows/IPSec problems, and after wisely deciding not to spend several days 
hunting around and deciphering all the IPSec messages in the event viewer 
(which I could probably do little about anyway as the L2TP handshake had 
failed for no apparent reason), I've finally got something that actually 
works - and damn simply at that. The most work I've had to do was creating 
the certificates and wrapping my head around the routing problem, because the 
VPN itself was an absolute cinch.

I'll let you know how it all goes over the coming days and weeks, but I'm 
really suitably impressed thus far.

Cheers,

David

Attachment: pgp0PDryqzJ9V.pgp
Description: PGP signature