V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX 提问指南
pluson
V2EX  ›  问与答

关于openvpn on linode ubuntu 12.04 LTS 问题请教

  •  
  •   pluson · 2012-12-03 23:59:27 +08:00 · 5321 次点击
    这是一个创建于 4407 天前的主题,其中的信息可能已经有所发展或是发生改变。
    以下相关资料,但是问题没有解决。请教,感谢。

    OpenVPN 2.2.1 x86_64-linux-gnu

    这里是log文件
    Mon Dec 3 15:02:13 2012 106.3.102.45:9358 TLS: Initial packet from [AF_INET]106.3.102.45:9358, sid=093f85b1 3e102491
    Mon Dec 3 15:02:13 2012 106.3.102.45:47406 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Mon Dec 3 15:02:13 2012 106.3.102.45:47406 TLS Error: TLS handshake failed
    配置方法按照linode vpn指南:http://library.linode.com/networking/openvpn/ubuntu-10.04-lucid#sph_connect-remote-networks-securely-with-the-vpn

    openvpn 官方提示:
    TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

    One of the most common problems in setting up OpenVPN is that the two OpenVPN daemons on either side of the connection are unable to establish a TCP or UDP connection with each other.

    This is almost a result of:
    A perimeter firewall on the server's network is filtering out incoming OpenVPN packets (by default OpenVPN uses UDP or TCP port number 1194).
    A software firewall running on the OpenVPN server machine itself is filtering incoming connections on port 1194. Be aware that many OSes will block incoming connections by default, unless configured otherwise.
    A NAT gateway on the server's network does not have a port forward rule for TCP/UDP 1194 to the internal address of the OpenVPN server machine.
    The OpenVPN client config does not have the correct server address in its config file. The remote directive in the client config file must point to either the server itself or the public IP address of the server network's gateway.
    Another possible cause is that the windows firewall is blocking access for the openvpn.exe binary. You may need to whitelist (add it to the "Exceptions" list) it for OpenVPN to work.
    6 条回复    1970-01-01 08:00:00 +08:00
    pluson
        1
    pluson  
    OP
       2012-12-04 00:09:57 +08:00
    TLS handshake failed 是不是代表client 可以require到server证明不是端口的问题?
    在猜测是不是ubuntu 12.04防火墙的事
    ericFork
        2
    ericFork  
       2012-12-04 00:30:40 +08:00   ❤️ 1
    UDP 1194 端口被封了,换个端口吧
    pluson
        3
    pluson  
    OP
       2012-12-04 12:16:36 +08:00
    @ericFork 换过,用1198 也是这样的
    gonghao
        4
    gonghao  
       2012-12-04 12:22:33 +08:00
    这就是功夫网的直接后果,换TCP试试吧~
    pluson
        5
    pluson  
    OP
       2012-12-04 12:23:30 +08:00
    @ericFork 又重新试了下 果然好了,感谢!
    pluson
        6
    pluson  
    OP
       2012-12-04 12:26:20 +08:00
    @gonghao 换过TCP但是那会没成功,可能还是因为端口的问题
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   2828 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 23ms · UTC 03:34 · PVG 11:34 · LAX 19:34 · JFK 22:34
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.