Re: OpenVPN Client on Ubuntu

["Darren Albers" <dalbers gmail com>]

On Dec 3, 2007 5:01 PM, MrDetermination <mrd mrdetermination com> wrote:
> The server is on DD-WRT and configured as directed here:
> http://www.dd-wrt.com/wiki/index.php/OpenVPN
> With the following in my startup commands:
>
> cd /tmp
> openvpn --mktun --dev tap0
> brctl addif br0 tap0
> ifconfig tap0 0.0.0.0 promisc up
>
> echo "
> # Tunnel options
> mode server       # Set OpenVPN major mode
> proto udp         # Setup the protocol (server)
> port xxxx         # TCP/UDP port number
> dev tap0          # TUN/TAP virtual network device
> keepalive 15 60   # Simplify the expression of --ping
> daemon            # Become a daemon after all initialization
> verb 3            # Set output verbosity to n
> comp-lzo          # Use fast LZO compression
>
> # OpenVPN server mode options
> client-to-client  # tells OpenVPN to internally route client-to-client
> traffic
> duplicate-cn      # Allow multiple clients with the same common name
>
> # TLS Mode Options
> tls-server        # Enable TLS and assume server role during TLS handshake
> ca ca.crt         # Certificate authority (CA) file
> dh dh1024.pem     # File containing Diffie Hellman parameters
> cert server.crt   # Local peer's signed certificate
> key server.key    # Local peer's private key
> " > openvpn.conf
>
> echo "
> -----BEGIN CERTIFICATE-----
> RANDOM GARBAGE
> -----END CERTIFICATE-----
> " > ca.crt
> echo "
> -----BEGIN RSA PRIVATE KEY-----
> RANDOM GARBAGE
> -----END RSA PRIVATE KEY-----
> " > server.key
> chmod 600 server.key
> echo "
> -----BEGIN CERTIFICATE-----
> RANDOM GARBAGE
> -----END CERTIFICATE-----
> " > server.crt
> echo "
> -----BEGIN DH PARAMETERS-----
> RANDOM GARBAGE
> -----END DH PARAMETERS-----
> " > dh1024.pem
>
> sleep 5
> ln -s /usr/sbin/openvpn /tmp/myvpn
> /tmp/myvpn --config openvpn.conf
>
<snip>

That config should work without a problem...  It is very similar to my
config.  Did you select use LZO Compression and Use TAP Device on the
optional tab?   Also try commenting out tls-server and see if it
works.