OpenVPN ssl issues

I haven't been able to get the ssl vpn to work. I'm not sure its configured correctly with the lack of documentation.

Here is what I am getting in the log.

2007:01:09-09:44:53 (none) openvpn[5271]: TCP connection established with ******xx:61688
2007:01:09-09:44:53 (none) openvpn[5271]: Socket Buffers: R=[131072->131072] S=[131072->131072]
2007:01:09-09:44:53 (none) openvpn[5271]: TCPv4_SERVER link local: [undef]
2007:01:09-09:44:53 (none) openvpn[5271]: TCPv4_SERVER link remote: ******xx:61688
2007:01:09-09:44:53 (none) openvpn[5271]: ******x:61688 WARNING: Bad encapsulated packet length from peer (32829), which must be > 0 and

Parents

0 mastercane over 17 years ago

2007:01:09-09:44:53 (none) openvpn[5271]: ******x:61688 WARNING: Bad encapsulated packet length from peer (32829), which must be > 0 and

Probier den angebotenen Fix doch einfach mal aus.

mfg
cane
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 lantech over 17 years ago in reply to mastercane

I looked into that a little and didn't find where to actually change those settings. I am running windows xp SP2 on the client side. Suggestions where to look?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stephan_Scholz over 17 years ago in reply to lantech

Please check the MTU on the virtual network adapter:
- Right-click on "My network places", select "Properties"
- Richt-click on "Astaro SSL VPN adapter", select "Properties"
- Click on "Configure"
- Select "Advanced" and click on "MTU".

Which MTU value do you get?

Stephan
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 lantech over 17 years ago in reply to Stephan_Scholz

I'm not even getting to the point where the ssl vpn adapter is installed. I can get to the management site at ***:4444, but I can't get to an actual page where I could even get the SSL adapter download.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stephan_Scholz over 17 years ago in reply to lantech

You need to enable the user portal in WebAdmin (Management->End-User-Portal), then connect to the user portal (default on standard HTTPS port) with the VPN user and download the package there.

Stephan
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 lantech over 17 years ago in reply to Stephan_Scholz

You need to enable the user portal in WebAdmin (Management->End-User-Portal), then connect to the user portal (default on standard HTTPS port) with the VPN user and download the package there.

Stephan

I missed that part. It's working now.

I would have assumed that the SSL VPN wouldn't require a client though. That really makes it no better than an IPSEC client except for fewer firewall issues. Doesn't help someone trying to connect from a different PC other than their own.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Stephan_Scholz over 17 years ago in reply to lantech

Glad that it works now, thanks for reporting.

Actually other SSL VPN solutions come with a client, too (if they provide full network access, that is, and if you want to use local applications). It's only that they hide the installation better by installing an ActiveX control :-)

Stephan
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 17 years ago in reply to lantech

I missed that part. It's working now.

I would have assumed that the SSL VPN wouldn't require a client though. That really makes it no better than an IPSEC client except for fewer firewall issues. Doesn't help someone trying to connect from a different PC other than their own.

I would point out that making it easy for clients to connect from a random PC (copy shop, coffee shop, etc.) is not a good idea... those types of public computers are favorite targets for keyloggers and other malware... I for one like the SSL VPN capability.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 BrucekConvergent over 17 years ago in reply to lantech

I missed that part. It's working now.

I would have assumed that the SSL VPN wouldn't require a client though. That really makes it no better than an IPSEC client except for fewer firewall issues. Doesn't help someone trying to connect from a different PC other than their own.

I would point out that making it easy for clients to connect from a random PC (copy shop, coffee shop, etc.) is not a good idea... those types of public computers are favorite targets for keyloggers and other malware... I for one like the SSL VPN capability.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data