Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a synology NAS that is my OPENVPN server. I am always on the road and I want to route all of my traffic through my house. Here is my config and my log.


config file

dev tun
tls-client

remote XX.XXX.XXX.XX 1194

# The "float" tells OpenVPN to accept authenticated packets from any address, 
# not only the address which was specified in the --remote option. 
# This is useful when you are connecting to a peer which holds a dynamic address 
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)

#float

# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

push redirect-gateway def1 
route 192.168.0.25 255.255.255.0 net_gateway
route 10.8.0.0 255.255.255.0 

# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.

push dhcp-option DNS 10.8.0.1
push dhcp-option DNS 192.168.0.25
push dhcp-option DNS 8.8.8.8
push dhcp-option DNS 8.8.4.4

pull

proto udp
script-security 2

ca ca.crt

comp-lzo

reneg-sec 0

auth-user-pass Dontbelazy.txt

log file

Tue Mar 19 13:55:35 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Mar 19 13:55:35 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Mar 19 13:55:35 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Mar 19 13:55:35 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Mar 19 13:55:35 2013 LZO compression initialized
Tue Mar 19 13:55:35 2013 UDPv4 link local (bound): [undef]:1194
Tue Mar 19 13:55:35 2013 UDPv4 link remote: XX.XXX.XXX.XX 1194
Tue Mar 19 13:56:35 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Mar 19 13:56:35 2013 TLS Error: TLS handshake failed
Tue Mar 19 13:56:35 2013 SIGUSR1[soft,tls-error] received, process restarting
share|improve this question

1 Answer 1

Try change

push redirect-gateway def1
route 192.168.0.25 255.255.255.0 net_gateway
route 10.8.0.0 255.255.255.0

to

redirect-gateway

and

push dhcp-option DNS 10.8.0.1
push dhcp-option DNS 192.168.0.25
push dhcp-option DNS 8.8.8.8
push dhcp-option DNS 8.8.4.4

to

dhcp-option DNS <YOUR_ROUTER_LOCAL_IP_ADDRESS>
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.