Уважаемы форумчане!
Подскажите, если не затруднит.
Имею опыт настройки openvpn. Сервак был на хрюше. Подключался к нему без проблем с помощью сертификатов.
Теперь, стало быть, сервером выступает Synology DS212j. Приложение openvpn установил. Всё сделал как сказали. Рабочая станция на windows 8 не подключается.
Собсна nas выдал ca.crt, openvpn.ovpn и readme, в котором было написано:
To set up an OpenVPN client on Windows:
1. Install OpenVPN client on Windows
*An OpenVPN client on Windows is called OpenVPN GUI.
*Download it from http://openvpn.net/index.php/open-source/downloads.html and install the client.
*The default installation directory is C:\ProgramFiles\OpenVPN.
2. Run OpenVPN GUI as administrator.
3. Edit openvpn.ovpn and replace YOUR_SERVER_IP with public IP of your DiskStation.
*If your DiskStation is behind a router, replace YOUR_SERVER_IP with the router's IP.
*Remove # before "redirect-gateway" to route all client traffic (including web-traffic) through this VPN Server.
4. Put ca.crt and openvpn.ovpn into the config subdirectory under OpenVPN directory
(ie. C:\Program Files\OpenVPN\config\).
В openvpn.ovpn:
dev tun
tls-client
remote IP 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto udp
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass
При подключении пишет следующую ошибку:
Sun Mar 29 23:47:07 2015 OpenVPN 2.3.6 i686-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [iPv6] built on Mar 19 2015
Sun Mar 29 23:47:07 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Sun Mar 29 23:47:12 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Mar 29 23:47:12 2015 UDPv4 link local (bound): [undef]
Sun Mar 29 23:47:12 2015 UDPv4 link remote: [AF_INET]IP:1194
Sun Mar 29 23:48:12 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Mar 29 23:48:12 2015 TLS Error: TLS handshake failed
Sun Mar 29 23:48:12 2015 SIGUSR1[soft,tls-error] received, process restarting
Sun Mar 29 23:48:14 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Mar 29 23:48:14 2015 UDPv4 link local (bound): [undef]
Sun Mar 29 23:48:14 2015 UDPv4 link remote: [AF_INET]IP:1194
Nas стоит за роутером Zyxel. Порт 1194 проброшен. На роутере статический IP.
Помогите. 