Configuration OpenVPN

[KZL]

Bonjour,

J'ai configuré le paquet OpenVPN de Synology, et j'ai installé sur mon macbook le logiciel Tunnelblick en suivant le tutoriel : https://www.synology.com/fr-fr/knowledgebase/DSM/tutorial/Application/How_to_connect_to_Synology_s_VPN_Server_using_a_Windows_PC_or_Mac

Firewall configuré, Privilèges utilisateur OK.

Lorsque je me connecte, j'ai d'abord un message d'erreur :

Citation

L’adresse IP publique apparente n’était pas différente après la connexion à openvpn. Elle est toujours XXX.XXX.XXX.XXX

Cela signifie probablement que votre VPN n’est pas configuré correctement.

J'arrive à me connecter et à accéder à mon routeur en local via l'ip 192.168.2.1.
Est-ce que qqn saurait où est-ce que cela pêche ?

(J'ai joint le log complet.. Je n'ai pas réussi à trouver de solution à mon problème autrement. Parcontre la connexion VPN PPTP fonctionne sans soucis.) 

Citation

2016-03-05 13:41:17 *Tunnelblick: OS X 10.11.3; Tunnelblick 3.5.8 (build 4270.4530)
2016-03-05 13:41:18 *Tunnelblick: Attempting connection with openvpn using shadow copy; Set nameserver = 1; monitoring connection
2016-03-05 13:41:18 *Tunnelblick: openvpnstart start openvpn.tblk 1337 1 0 1 0 16688 -ptADGNWradsgnw 2.3.6
2016-03-05 13:41:18 *Tunnelblick: openvpnstart starting OpenVPN
2016-03-05 13:41:19 OpenVPN 2.3.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Mar  2 2016
2016-03-05 13:41:19 library versions: OpenSSL 1.0.1s  1 Mar 2016, LZO 2.08
2016-03-05 13:41:20 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.6/openvpn
          --daemon
          --log
          /Library/Application Support/Tunnelblick/Logs/-SUsers-Smyuser-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sopenvpn.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_16688.1337.openvpn.log
          --cd
          /Library/Application Support/Tunnelblick/Users/myuser/openvpn.tblk/Contents/Resources
          --config
          /Library/Application Support/Tunnelblick/Users/myuser/openvpn.tblk/Contents/Resources/config.ovpn
          --cd
          /Library/Application Support/Tunnelblick/Users/myuser/openvpn.tblk/Contents/Resources
          --management
          127.0.0.1
          1337
          --management-query-passwords
          --management-hold
          --script-security
          2
          --up
          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw
          --down
          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

2016-03-05 13:41:20 *Tunnelblick: Established communication with OpenVPN
2016-03-05 13:41:24 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2016-03-05 13:41:24 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-03-05 13:41:24 UDPv4 link local (bound): [undef]
2016-03-05 13:41:24 UDPv4 link remote: [AF_INET]XX.XXX.XXX.X:1194
2016-03-05 13:41:24 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2016-03-05 13:41:26 [www.mondomaine.net] Peer Connection Initiated with [AF_INET]XX.XXX.XXX.X:1194
2016-03-05 13:41:28 Opened utun device utun0
2016-03-05 13:41:28 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2016-03-05 13:41:28 /sbin/ifconfig utun0 delete
                                        ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2016-03-05 13:41:28 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2016-03-05 13:41:28 /sbin/ifconfig utun0 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up
2016-03-05 13:41:28 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw utun0 1500 1542 10.8.0.6 10.8.0.5 init
                                        **********************************************
                                        Start of output from client.up.tunnelblick.sh
                                        No network configuration changes need to be made.
                                        Will NOT monitor for other network configuration changes.
                                        DNS servers '75.75.75.75 75.75.76.76 2001:558:feed::1 2001:558:feed::2' will be used for DNS queries when the VPN is active
                                        The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
                                        Flushed the DNS cache via dscacheutil
                                        /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                        Notified mDNSResponder that the DNS cache was flushed
                                        End of output from client.up.tunnelblick.sh
                                        **********************************************
                                        add net 192.168.2.0: gateway 10.8.0.5
                                        add net 10.8.0.0: gateway 10.8.0.5
                                        add net 10.8.0.1: gateway 10.8.0.5
2016-03-05 13:41:31 *Tunnelblick: No 'connected.sh' script to execute
2016-03-05 13:41:31 Initialization Sequence Completed
2016-03-05 13:41:36 *Tunnelblick: This computer's apparent public IP address (98.226.112.97) was unchanged after the connection was made
 

 

Modifié le 5 mars 2016 par KZL

[gaetan.cambier]

à tout hazard, tu utiliserai pas ton vpn de ton mac à partir de ton reseau local ?

Modifié le 5 mars 2016 par gaetan.cambier

[KZL]

Non ! Je ne suis pas chez moi.

J'ai édité mon premier message, j'arrivais pas à lire le log file joint. Peut-Être que ça aidera ?

[gaetan.cambier]

pour moi manque la default gateway qui n'est pas ajoutée quand le vpn est monté 

--> tu passe pour tous les site via ta connection normale et pour les les reseau suivant :

Citation

add net 192.168.2.0: gateway 10.8.0.5
add net 10.8.0.0: gateway 10.8.0.5
add net 10.8.0.1: gateway 10.8.0.5

par le vpn

bon, à la fois, mac, c'est pas mon domaine, mais bon, c'est p-e juste une case à cocher pour que tous le traffic passe par le vpn ;)

[KZL]

Bonjour,

En effet, j'ai coché le bouton. Parcontre le problème n'est pas réglé, car à présent l'authentification ne fonctionne pas 

Citation

2016-03-05 14:59:42 *Tunnelblick: OS X 10.11.3; Tunnelblick 3.5.8 (build 4270.4530)

2016-03-05 14:59:43 *Tunnelblick: Attempting connection with openvpn using shadow copy; Set nameserver = 0; not monitoring connection

2016-03-05 14:59:43 *Tunnelblick: openvpnstart start openvpn.tblk 1339 0 0 1 1 17200 -ptADGNWradsgnw 2.3.6

2016-03-05 14:59:44 *Tunnelblick: openvpnstart log:

     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

     

          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.6/openvpn

          --daemon

          --log

          /Library/Application Support/Tunnelblick/Logs/-SUsers-Smarcomeyer-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sopenvpn.tblk-SContents-SResources-Sconfig.ovpn.0_0_1_1_17200.1339.openvpn.log

          --cd

          /Library/Application Support/Tunnelblick/Users/marcomeyer/openvpn.tblk/Contents/Resources

          --config

          /Library/Application Support/Tunnelblick/Users/marcomeyer/openvpn.tblk/Contents/Resources/config.ovpn

          --cd

          /Library/Application Support/Tunnelblick/Users/marcomeyer/openvpn.tblk/Contents/Resources

          --management

          127.0.0.1

          1339

          --management-query-passwords

          --management-hold

          --redirect-gateway

          def1

          --script-security

          2

 

2016-03-05 14:59:43 *Tunnelblick: openvpnstart starting OpenVPN

2016-03-05 14:59:44 OpenVPN 2.3.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Mar  2 2016

2016-03-05 14:59:44 library versions: OpenSSL 1.0.1s  1 Mar 2016, LZO 2.08

2016-03-05 14:59:45 *Tunnelblick: Established communication with OpenVPN

2016-03-05 14:59:49 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

2016-03-05 14:59:50 UDPv4 link local (bound): [undef]

2016-03-05 14:59:50 UDPv4 link remote: [AF_INET]92.161.219.6:1194

2016-03-05 14:59:50 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2016-03-05 14:59:53 [www.gauss-it.net] Peer Connection Initiated with [AF_INET]92.161.219.6:1194

2016-03-05 14:59:55 AUTH: Received control message: AUTH_FAILED

2016-03-05 14:59:55 SIGTERM[soft,auth-failure] received, process exiting

2016-03-05 14:59:58 *Tunnelblick: Disconnecting; user cancelled authorization or there was an error obtaining authorization

2016-03-05 14:59:58 *Tunnelblick: Disconnecting using 'kill'

2016-03-05 15:00:00 *Tunnelblick: No 'post-disconnect.sh' script to execute

2016-03-05 15:00:00 *Tunnelblick: Expected disconnection occurred.