Git Product home page Git Product logo

Comments (8)

brnl avatar brnl commented on July 28, 2024

I would suggest the second TAP adapter is not properly installed. Can you provide the relevant logs?

from openvpn-manager.

ttblum avatar ttblum commented on July 28, 2024

It connects to the first VPN OK.

When I try to connect to the second VPN, it connects to the first VPN instead, even though I had selected the second. I can reproduce this on two computers so far.

Here are the configs and logs:

First VPN config:


dev tun
persist-tun
persist-key
cipher AES-128-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote xxx.xx.xx.xx lllllll udp
verify-x509-name "xxx.xx.xx.xx" name
auth-user-pass
pkcs12 ******-udp-*****-JL.p12
tls-auth *****-udp-*****-JL-tls.key 1
comp-lzo adaptive
# dont terminate service process on wrong password, ask again
auth-retry interact
# open management channel
management 127.0.0.1 166
# wait for management to explicitly start connection
management-hold
# query management channel for user/pass
management-query-passwords
# disconnect VPN when management program connection is closed
management-signal
# forget password when management disconnects
management-forget-disconnect

Second VPN config:


dev tun
persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote yyy.yy.yy.yyy llllll udp
lport 0
verify-x509-name "vpn-client-server-cert" name
auth-user-pass
pkcs12 ******-udp-******-******.p12
tls-auth *******-udp-******-******-tls.key 1
ns-cert-type server
comp-lzo adaptive
# dont terminate service process on wrong password, ask again
auth-retry interact
# open management channel
management 127.0.0.1 166
# wait for management to explicitly start connection
management-hold
# query management channel for user/pass
management-query-passwords
# disconnect VPN when management program connection is closed
management-signal
# forget password when management disconnects
management-forget-disconnect

First VPN log:


Thu Jul 06 09:57:42 2017 OpenVPN 2.3.11 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Thu Jul 06 09:57:42 2017 Windows version 6.1 (Windows 7) 64bit
Thu Jul 06 09:57:42 2017 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Thu Jul 06 10:10:54 2017 Control Channel Authentication: using '******-udp-****-JL-tls.key' as a OpenVPN static key file
Thu Jul 06 10:10:54 2017 UDPv4 link local (bound): [undef]
Thu Jul 06 10:10:54 2017 UDPv4 link remote: [AF_INET]xxx.xx.xx.xx:lllll
Thu Jul 06 10:10:54 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jul 06 10:10:55 2017 [xxx.xx.xx.xx] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:lllll
Thu Jul 06 10:10:57 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jul 06 10:10:57 2017 open_tun, tt->ipv6=0
Thu Jul 06 10:10:57 2017 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{2DF45A8E-ABAF-4573-8798-77088541ACC4}.tap
Thu Jul 06 10:10:57 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of pr.i.va.te/255.255.255.252 on interface {2DF45A8E-ABAF-4573-8798-77088541ACC4} [DHCP-serv: pr.i.va.te, lease-time: 31536000]
Thu Jul 06 10:10:57 2017 Successful ARP Flush on interface [15] {2DF45A8E-ABAF-4573-8798-77088541ACC4}
Thu Jul 06 10:11:02 2017 Initialization Sequence Completed
Thu Jul 06 10:11:27 2017 SIGHUP[hard,] received, process restarting
Thu Jul 06 10:11:27 2017 OpenVPN 2.3.11 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Thu Jul 06 10:11:27 2017 Windows version 6.1 (Windows 7) 64bit
Thu Jul 06 10:11:27 2017 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Thu Jul 06 10:11:46 2017 Control Channel Authentication: using '*******udp-lllll-JL-tls.key' as a OpenVPN static key file
Thu Jul 06 10:11:46 2017 UDPv4 link local (bound): [undef]
Thu Jul 06 10:11:46 2017 UDPv4 link remote: [AF_INET]xxx.xx.xx.xx:lllll
Thu Jul 06 10:11:47 2017 [xxx.xx.xx.xx] Peer Connection Initiated with [AF_INET]xxx.xx.xx.xx:lllll
Thu Jul 06 10:11:49 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jul 06 10:11:49 2017 open_tun, tt->ipv6=0
Thu Jul 06 10:11:49 2017 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{2DF45A8E-ABAF-4573-8798-77088541ACC4}.tap
Thu Jul 06 10:11:49 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of pr.i.va.te/255.255.255.252 on interface {2DF45A8E-ABAF-4573-8798-77088541ACC4} [DHCP-serv: pr.i.va.te, lease-time: 31536000]
Thu Jul 06 10:11:49 2017 Successful ARP Flush on interface [15] {2DF45A8E-ABAF-4573-8798-77088541ACC4}
Thu Jul 06 10:11:54 2017 Initialization Sequence Completed
Thu Jul 06 10:12:11 2017 SIGHUP[hard,] received, process restarting
Thu Jul 06 10:12:11 2017 OpenVPN 2.3.11 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Thu Jul 06 10:12:11 2017 Windows version 6.1 (Windows 7) 64bit
Thu Jul 06 10:12:11 2017 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09

Second VPN log:


Thu Jul 06 10:24:56 2017 OpenVPN 2.3.11 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Thu Jul 06 10:24:56 2017 Windows version 6.1 (Windows 7) 64bit
Thu Jul 06 10:24:56 2017 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Thu Jul 06 10:24:56 2017 MANAGEMENT: Socket bind failed on local address [AF_INET]127.0.0.1:166: Address already in use (WSAEADDRINUSE)
Thu Jul 06 10:24:56 2017 Exiting due to fatal error

from openvpn-manager.

jochenwierum avatar jochenwierum commented on July 28, 2024

Please try to use different ports in the management directive, i.e.:
management 127.0.0.1 166
for the first and
management 127.0.0.1 167
for the second configuration.

Does this help?

from openvpn-manager.

ttblum avatar ttblum commented on July 28, 2024

Thanks, that worked on my computer, I can connect OK to both now.

However, on another computer, when I try to connect to the second VPN as a standard Windows user I'm getting:

ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20] env_block: add PATH\C:\Windows\System32;C:\Windows\System32\Wbem
ERROR: Windows route add command failed [adaptive]: returned error code 1
ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20] env_block: add PATH\C:\Windows\System32;C:\Windows\System32\Wbem
ERROR: Windows route add command failed [adaptive]: returned error code 1

The first VPN connects fine and is able to set the route OK under the same standard Windows user.

When logged in as an admin Windows user, both connections set the routes OK.

What could be causing this?

from openvpn-manager.

hapm avatar hapm commented on July 28, 2024

How is the connection setup on the other computer? Do you use the native OpenVPN-Service, OpenVPNManager-Service or the usermode setup without services? OpenVPNManager needs administration privilegs if openvpn runs in user mode and you want to set routes.
If you need to run without admin privilegs make sure to setup the profile using either the native openvpn service or OpenVPNManager-Service.

from openvpn-manager.

hapm avatar hapm commented on July 28, 2024

The first question was related to #36. Only adding this as a reference,

from openvpn-manager.

ttblum avatar ttblum commented on July 28, 2024

I'm using OpenVPNManager service, I generated the installer from pfSense.

I've never needed an admin account to use this before, this is the first time I've gotten this error..

from openvpn-manager.

ttblum avatar ttblum commented on July 28, 2024

Not sure what happened, but I exported the VPN config again from the pfSense router, checking 'Management Interface OpenVPNManager'.

When I imported again it's able to set the routes OK as a standard user.

from openvpn-manager.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.