While attempting to set up OpenVPN I got to the point when I get connected but with following bunch of messages in the log:
WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tun'
WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1544'
WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1500'
WARNING: 'proto' is present in local config but missing in remote config, local='proto TCPv4_SERVER'
WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
WARNING: 'cipher' is present in local config but missing in remote config, local='cipher BF-CBC'
WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA1'
WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 128'
WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
When googling I have seen that usual answer to this is "set MTU properly", but from what I read it appears that MTU can be configured only when connecting via UDP, while I am using TCP to set up the VPN. (I guess I would need to allow UDP somewhere, while TCP at least connects. Yes, I had UDP allowed in the router FW script.) That leads me to conclusion that with TCP MTU is not relevant so the cause of those warnings must lie elsewhere. (Regardless of that I did set up MTU properly using the pinging method.)
client config:
client
dev tun
proto tcp
remote vpnsetupfail.lol 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
verb 4
server config:
push “route 192.168.1.0 255.255.255.0”
server 10.8.0.0 255.255.255.0
dev tun0
proto tcp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001
verb 4
I am using OpenVPN 2.1.4 on Windows7, router firmware is "DD-WRT v24-sp2 (08/07/10) mega".
