chiew yock sang wrote:
/etc/shorewall/tunnels (routerA)
#type             zone        gateway        gateway zone
openvpn:7777  net         192.168.99.2
this is either a typo, or a problem - the error message you quoted later suggests openvpn runs on port 5000 - but in /etc/shorewall/tunnels you define that it uses port 7777 - this is most likely not going to work...


How to copy this key to router B and vice versa?Or i only need to generate the key in one router?
In any way that would be considered "secure". So, either by using a connection that uses strong encryption or by simply using a floppy. Remember, when using pre-shared keys, the security of the VPN relies on how securely those keys were transferred (and kept).

In routerA, when i try to ping 192.168.99.2, the following commands pop up:
Virtual device tun0 asks to queue packet!
ping: sendto: Network is down
Hm, I've never seen that error - but I must say, I'm not quite sure how commands actually "pop up" - do you mean that the message you quoted appears on the console? Or in the logs (and if so, which log)?

and when i do,
openvpn --ping 5 --dev tun0
it says all encryption and authentication features disabled-- all data will be tunnelled as cleartext
socket bind failed on local address [undef]:5000:Address already in use
Exiting
Do a "ps aux" on the router in question to find out if openvpn is already running, most likely, this is the source of your error. You can also use netstat to find out if something is indeed already listening on port 5000. Openvpn should not really be started "by hand" (by entering "openvpn" at the prompt) buit rather by the init-script). So, if you want to start openvpn, do a
svi openvpn start
the --ping 5 option can also be specified in the config file (and tun0 as dev is already specified in your config file, so that would be redundant).


Martin



-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to