Need help to setup openvpn Server on port 1195

[fosiul]

HI
I am following this article to setup openvpn on port 1195

http://forum.pfsense.org/index.php?topic=7840.0
but i have few confusion

Address pool: 192.168.200.0/24 (it should be a network that you DONT currently use)
Local Network: 192.168.1.0/24 or whatever the network is that you want the VPN client to connect to !!UPDATE: Note to add this value you need to first add the

so i did :

Address pool: 192.168.200.0/24
Local Network:/24

NOw on 32, its saying to setup rules for LAN

so i chose

Actions :pass
Interface : LAN
protocol : ANY
Source : Type : NETwork , ADdress:192.168.200.0/24
Desti : ANY

what i put in LAN rules, is that Ok ??

but i cant connect , its looks like , client cant even enter to port 1195, in firewall, i chose to LOG packets, but its looks like, nothing coming in via port 1195

Thanks for your help

[GruensFroeschli]

Rules on the LAN interface are for traffic on the LAN interface.

What you want is to create a rule on the WAN interface.
Allow on WAN
Source: any,
Sourceport: any
Destination: WAN-address
Destinationport: 1195

[fosiul]

HI thanks
So that means , i dont need to create  setup rules for LAN, only WAN rules will be enough, is not it ??

NOw when i am connecting from my computer to openvpn , its stuck here, it does not go any more further

Fri Aug 13 18:22:55 2010 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 11 2009
Fri Aug 13 18:22:55 2010 NOTE: OpenVPN 2.1 requires '–script-security 2' or higher to call user-defined scripts or executables
Fri Aug 13 18:22:55 2010 LZO compression initialized
Fri Aug 13 18:22:55 2010 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Aug 13 18:22:55 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 13 18:22:55 2010 Local Options hash (VER=V4): '41690919'
Fri Aug 13 18:22:55 2010 Expected Remote Options hash (VER=V4): '530fdded'
Fri Aug 13 18:22:55 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Aug 13 18:22:55 2010 UDPv4 link local: [undef]
Fri Aug 13 18:22:55 2010 UDPv4 link remote: xx.xx.xx.xx:1195

does  not it mean, firewall still blocking ??

Thanks for your help

[GruensFroeschli]

Please show the config from your server and from your client.

[fosiul]

hi thanks
i configures openvpn via gui as said into that article.
From where will get config file from server. Which location

Thanks

[fosiul]

Hi please help me out…

this is the config

openvpn_client0.ca        openvpn_client0.cert          
openvpn_client0.conf           openvpn_client0.key

openvpn_csc
           openvpn_server0.ca
                         openvpn_server0.cert
                    openvpn_server0.conf
    openvpn_server0.dh
                      openvpn_server0.key

Server config file :

cat openvpn_server0.conf

writepid /var/run/openvpn_server0.pid
#user nobody
#group nobody
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
dev tun
proto udp
cipher BF-CBC
up /etc/rc.filter_configure
down /etc/rc.filter_configure
server 192.168.200.0 255.255.255.0
client-config-dir /var/etc/openvpn_csc
push "route
lport 1195
push "dhcp-option DISABLE-NBT"
ca /var/etc/openvpn_server0.ca
cert /var/etc/openvpn_server0.cert
key /var/etc/openvpn_server0.key
dh /var/etc/openvpn_server0.dh
comp-lzo
persist-remote-ip
float

And the Client config file :

client
dev tun
proto udp
remote XXX.XXX.XXX.XXX 1195
ping 10
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert mycrt.crt
key mycrt.key
ns-cert-type server
comp-lzo
pull
verb 3

what i am doing wrong ??
thanks

[fosiul]

its working.