VPN - working?? - Raspberry Pi Forums

using guidance found here:

http://www.sans.org/reading-room/whitep ... y-pi-34427

have appears working vpn on pi2 raspbian can access android mobile phone , nexus 7, using openvpn android.

cannot determine whether working , directing traffic through vpn. vpn stauts shows connected , there 'upload' kb , 'download kb. can access internet when ask ip given wan ip.

in log there 3 errors:
1, warning, configuration may cache passwords - use auth-nocache option prevent this. (can't find option)
2. warning: 'link-mtu' used inconsistently, local 'link-mtu 1557', remote 'link-mtu 1558'
3. warning: 'comp-lzo' present in remote config missing in local config, remote='comp-lzo'

there way confirm either via pi or on phone, route of data is?

surprised there 'remote' too. be?

code: select all

sudo nano var/log/openvpn.log tue jul  7 20:51:32 2015 openvpn 2.2.1 arm-linux-gnueabihf [ssl] [lzo2] [epoll] [pkcs11] [eurephia] [mh] [pf_inet6] [ipv6 payload 20110424-2 (2.2rc2)] built on dec  1 2014 tue jul  7 20:51:32 2015 note: local lan uses extremely common subnet address 192.168.0.x or 192.168.1.x.  aware might create routing conflicts if co$ tue jul  7 20:51:32 2015 note: openvpn 2.1 requires '--script-security 2' or higher call user-defined scripts or executables tue jul  7 20:51:33 2015 control channel authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' openvpn static key file tue jul  7 20:51:33 2015 tun/tap device tun0 opened tue jul  7 20:51:33 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 tue jul  7 20:51:33 2015 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500 tue jul  7 20:51:33 2015 gid set nogroup tue jul  7 20:51:33 2015 uid set nobody tue jul  7 20:51:33 2015 udpv4 link local (bound): [af_inet]192.168.1.200:1194 tue jul  7 20:51:33 2015 udpv4 link remote: [undef] tue jul  7 20:51:33 2015 initialization sequence completed tue jul  7 20:57:58 2015 192.168.1.1:49548 re-using ssl/tls context tue jul  7 20:57:58 2015 192.168.1.1:49548 lzo compression initialized tue jul  7 20:57:58 2015 192.168.1.1:49548 warning: 'link-mtu' used inconsistently, local='link-mtu 1558', remote='link-mtu 1557' tue jul  7 20:57:58 2015 192.168.1.1:49548 warning: 'comp-lzo' present in local config missing in remote config, local='comp-lzo' tue jul  7 20:57:58 2015 192.168.1.1:49548 [makem] peer connection initiated [af_inet]192.168.1.1:49548 tue jul  7 20:57:58 2015 makem/192.168.1.1:49548 multi_sva: pool returned ipv4=10.8.0.6, ipv6=e876:fe7e:803e:f076:346b:f576:24bd:cf78 tue jul  7 20:58:01 2015 makem/192.168.1.1:49548 send_push_reply(): safe_cap=960 tue jul  7 20:58:09 2015 makem/192.168.1.1:49548 bad lzo decompression header byte: 69 tue jul  7 20:58:14 2015 makem/192.168.1.1:49548 bad lzo decompression header byte: 69 tue jul  7 20:58:19 2015 makem/192.168.1.1:49548 bad lzo decompression header byte: 69  sudo nano /var/log/openvpn-status.log openvpn client list updated,tue jul  7 21:21:07 2015 common name,real address,bytes received,bytes sent,connected since routing table virtual address,common name,real address,last ref global stats max bcast/mcast queue length,0 end  

did try test openvpn internet access point.

if openvpn works should have access intranet somewhere else if set port forward , able figure out internet ip of openvpn server. use dyndns.org.

check whatismyip.com on table figure out if openvpn reroute.

in config file redirect gateway (push "redirect-gateway").when i'm on café android network redirect home openvpn. handy when on vacation , want watch regional location lock. protect android snooping since goes openvpn.


daniel

raspberrypi