Can't connect to OpenVPN Access Server using Network Manager configuration - Ask Ubuntu
i use terminal , type
sudo openvpn --config client.ovpn
in order connect vps on installed openvpn access server in order make own vpn. however, it's not practical, when have switch vpn (cisco, in network manager).
so looked , found add openvpn config network manager after installing network-manager-openvpn
.
however, config file not recognized when click "import saved vpn configuration...", says
error: key file contains line 'setenv forward_compatible 1' not key-value pair, group, or comment.
i tried deleting line, it's line that's faulty, , another, , on.
so tried splitting .ovpn
file ca.crt
, client.cr
, client.key
, using sacli
script openvpn access server provides on server itself. put the gateway, , without port/tcp/udp
, chose "password certificates (tls)", username linked config file, password, linked different .crt
, .key files
, tried many different combinations of advanced parameters (use custom gateway port 443/1194, use tcp connection on/off, use lzo data compression on/off)... no result, after chose vpn connection network manager icon shows tries connect second, shows padlock split second, , goes on minute before telling me failed.
if try using static key have fill in "remote ip address" , "local ip address", , haven't found they're supposed have gateway. can't save settings without them, tried putting gateway in "remote ip address" , "127.0.0.1" "local ip address", when instantly tells me "vpn connection failed".
has idea of how manage working?
i managed find way have more detail errors. looked through syslog on client while trying connect, , log openvpnas.log
@ /var/log
on server.
i'm using password certificates (tls)
authentification, , apparently, in order make configuration right had go in advanced
tls authentification
, tick use additional tls authentification
, chose ta.key
file , chose direction 1
. on general
tab have use custom gateway port
set 443
, use lzo data compression
, use tcp connection
ticked. hope can in future, i've lost time on this..
Comments
Post a Comment