Jeg købte mig en GLI GL-AR300M minirouter, og fik det med held sat op således at minirouteren via min almindelige router opretter en openvpn forbindelse til mit netværk i Danmark. Tilsvarende kunne jeg køre openvpn klienten på min PC og få al traffik til at gå via Danmark.
Fantastisk bortset fra at det er holdt op med at virke på både mini-routeren og fra min PC. Når jeg åbner openvpn
GUI'en så kommer flg. fejl:
---------------------------
OpenVPN GUI
---------------------------
"OpenVPNServiceInteractive" is not started.
Tasks requiring administrative access may not work.
---------------------------
OK
---------------------------
Jeg kan dog godt lave en connection, men loggen indikerer at noget er galt:
openvpn logger viser flg. (ip-adresse erstattet af x'er):
Mon Jun 26 15:57:22 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 31 2017
Mon Jun 26 15:57:22 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Jun 26 15:57:22 2017 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Enter Management Password:
Mon Jun 26 15:57:26 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Jun 26 15:57:26 2017 UDP link local: (not bound)
Mon Jun 26 15:57:26 2017 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Jun 26 15:57:29 2017 [RT-AC51U] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Jun 26 15:57:30 2017 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Mon Jun 26 15:57:30 2017 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Mon Jun 26 15:57:30 2017 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
Mon Jun 26 15:57:30 2017 open_tun
Mon Jun 26 15:57:30 2017 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{D6F34394-5F59-4166-8DE1-F9A0CA2EE84C}.tap
Mon Jun 26 15:57:30 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {D6F34394-5F59-4166-8DE1-F9A0CA2EE84C} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Jun 26 15:57:30 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Mon Jun 26 15:57:35 2017 ROUTE: route addition failed using CreateIpForwardEntry: Adgang nægtet. [status=5 if_index=21]
Mon Jun 26 15:57:35 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Jun 26 15:57:35 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jun 26 15:57:35 2017 ROUTE: route addition failed using CreateIpForwardEntry: Adgang nægtet. [status=5 if_index=20]
Mon Jun 26 15:57:35 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Jun 26 15:57:35 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jun 26 15:57:35 2017 ROUTE: route addition failed using CreateIpForwardEntry: Adgang nægtet. [status=5 if_index=20]
Mon Jun 26 15:57:35 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Jun 26 15:57:35 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jun 26 15:57:35 2017 ROUTE: route addition failed using CreateIpForwardEntry: Adgang nægtet. [status=5 if_index=20]
Mon Jun 26 15:57:35 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Jun 26 15:57:35 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jun 26 15:57:35 2017 ROUTE: route addition failed using CreateIpForwardEntry: Adgang nægtet. [status=5 if_index=20]
Mon Jun 26 15:57:35 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Jun 26 15:57:35 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jun 26 15:57:35 2017 Initialization Sequence Completed
Jeg mener ikke at have ændret noget i opsætningen eller i router konfigurationen, men der er jo nogle "adgang nægtet" advarsler.
Har nogen en ide til hvad sm kunne være galt?
--