Ezat wrote:
> Hey Paul,
> 
> Yeh this has got me baffled.  Anyway, Ive attached my client log which
> looks to be okay.. The client I am using is from openvpn.se... v1.0.3
> from what the about info states.. Not sure if that is a problem either.

are your users behind the same NAT gateway by any chance? drop the "port
1194" and use "nobind"?

also drop the "tls-client", "dev-node", "ns-cert-type-server" and "pull"
lines just for the moment.

> 
> Here is my client config
> 
> #float
> port 1194
> dev tun
> dev-node ovpn
> #proto tcp-client
> remote x.x.x.x 1194
> ping 10
> persist-tun
> persist-key
> tls-client
> ca ezat.crt
> cert ezat.crt
> key ezat.key
> ns-cert-type server
> comp-lzo
> pull
> verb 4
> 
> Off to get some shuteye... 2am here in Syd.. Thanks soo muchly for the
> help.
> Ezat
> Paul M wrote:
>> Ezat wrote:
>>  
>>> Thanks Paul,
>>>
>>> The config looks sane to me.. Ive rebooted the device but still no go.
>>>     
>>
>>
>> I've compared your config closely with mine, so it has to be the client
>> config. Here's my definitively working client config:
>>
>> client
>> log             /etc/openvpn/client.log
>> status          /etc/openvpn/client.status
>> daemon
>> dev             tun3                    # Generate/use tun
>> proto           udp
>> keepalive       10 60                   # Some ping like messages
>> persist-tun                             # Some persist options
>> persist-key                             # Some persist options
>> resolv-retry    infinite
>> comp-lzo                                # Enable compression
>> verb            1                       # Log verbosity
>> #
>> nobind                                  # UDP high local port
>> remote          xxx.xxx.xxx 1194        # OpenVPN server
>>
>>
>>
>> it's important there's no ifconfig line at all.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>> Commercial support available - https://portal.pfsense.org
>>
>>   
> 
> 
> ------------------------------------------------------------------------
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> Commercial support available - https://portal.pfsense.org


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Commercial support available - https://portal.pfsense.org

Reply via email to