【求助】关于OPENVPN客户端配置 请论坛里面的高手支招

anynamco

各位
      小弟最近配置了OPENVPN服务器  用于出破WAP限制、服务器端配置完成。
客户端方面怎么也不能拨号。错误提示如下：
Sat Jun 05 19:58:24 2010 us=94988 Current Parameter Settings:
Sat Jun 05 19:58:24 2010 us=95033   config = 'client.ovpn'
Sat Jun 05 19:58:24 2010 us=95043   mode = 0
Sat Jun 05 19:58:24 2010 us=95053   show_ciphers = DISABLED
Sat Jun 05 19:58:24 2010 us=95062   show_digests = DISABLED
Sat Jun 05 19:58:24 2010 us=95071   show_engines = DISABLED
Sat Jun 05 19:58:24 2010 us=95080   genkey = DISABLED
Sat Jun 05 19:58:24 2010 us=95090   key_pass_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95100   show_tls_ciphers = DISABLED
Sat Jun 05 19:58:24 2010 us=95109   proto = 2
Sat Jun 05 19:58:24 2010 us=95118   local = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95129   remote_list[0] = {'113.204.34.35', 443}
Sat Jun 05 19:58:24 2010 us=95139   remote_random = DISABLED
Sat Jun 05 19:58:24 2010 us=95149   local_port = 1194
Sat Jun 05 19:58:24 2010 us=95159   remote_port = 1194
Sat Jun 05 19:58:24 2010 us=95168   remote_float = DISABLED
Sat Jun 05 19:58:24 2010 us=95178   ipchange = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95187   bind_local = DISABLED
Sat Jun 05 19:58:24 2010 us=95196   dev = 'tun'
Sat Jun 05 19:58:24 2010 us=95205   dev_type = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95215   dev_node = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95224   tun_ipv6 = DISABLED
Sat Jun 05 19:58:24 2010 us=95234   ifconfig_local = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95244   ifconfig_remote_netmask = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95255   ifconfig_noexec = DISABLED
Sat Jun 05 19:58:24 2010 us=95264   ifconfig_nowarn = DISABLED
Sat Jun 05 19:58:24 2010 us=95275   shaper = 0
Sat Jun 05 19:58:24 2010 us=95284   tun_mtu = 1500
Sat Jun 05 19:58:24 2010 us=95294   tun_mtu_defined = ENABLED
Sat Jun 05 19:58:24 2010 us=95304   link_mtu = 1500
Sat Jun 05 19:58:24 2010 us=95313   link_mtu_defined = DISABLED
Sat Jun 05 19:58:24 2010 us=95323   tun_mtu_extra = 0
Sat Jun 05 19:58:24 2010 us=95332   tun_mtu_extra_defined = DISABLED
Sat Jun 05 19:58:24 2010 us=95342   fragment = 0
Sat Jun 05 19:58:24 2010 us=95352   mtu_discover_type = -1
Sat Jun 05 19:58:24 2010 us=95361   mtu_test = 0
Sat Jun 05 19:58:24 2010 us=95370   mlock = DISABLED
Sat Jun 05 19:58:24 2010 us=95379   keepalive_ping = 0
Sat Jun 05 19:58:24 2010 us=95388   keepalive_timeout = 0
Sat Jun 05 19:58:24 2010 us=95398   inactivity_timeout = 0
Sat Jun 05 19:58:24 2010 us=95407   ping_send_timeout = 0
Sat Jun 05 19:58:24 2010 us=95416   ping_rec_timeout = 0
Sat Jun 05 19:58:24 2010 us=95426   ping_rec_timeout_action = 0
Sat Jun 05 19:58:24 2010 us=95436   ping_timer_remote = DISABLED
Sat Jun 05 19:58:24 2010 us=95445   remap_sigusr1 = 0
Sat Jun 05 19:58:24 2010 us=95454   explicit_exit_notification = 0
Sat Jun 05 19:58:24 2010 us=95464   persist_tun = DISABLED
Sat Jun 05 19:58:24 2010 us=95473   persist_local_ip = DISABLED
Sat Jun 05 19:58:24 2010 us=95483   persist_remote_ip = DISABLED
Sat Jun 05 19:58:24 2010 us=95492   persist_key = DISABLED
Sat Jun 05 19:58:24 2010 us=95501   mssfix = 1450
Sat Jun 05 19:58:24 2010 us=95511   resolve_retry_seconds = 1000000000
Sat Jun 05 19:58:24 2010 us=95521   connect_retry_seconds = 5
Sat Jun 05 19:58:24 2010 us=95530   username = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95540   groupname = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95549   chroot_dir = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95558   cd_dir = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95568   writepid = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95577   up_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95587   down_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=95595   down_pre = DISABLED
Sat Jun 05 19:58:24 2010 us=95605   up_restart = DISABLED
Sat Jun 05 19:58:24 2010 us=95614   up_delay = DISABLED
Sat Jun 05 19:58:24 2010 us=95624   daemon = DISABLED
Sat Jun 05 19:58:24 2010 us=95633   inetd = 0
Sat Jun 05 19:58:24 2010 us=95647   log = DISABLED
Sat Jun 05 19:58:24 2010 us=95657   suppress_timestamps = DISABLED
Sat Jun 05 19:58:24 2010 us=95666   nice = 0
Sat Jun 05 19:58:24 2010 us=95675   verbosity = 4
Sat Jun 05 19:58:24 2010 us=95683   mute = 0
Sat Jun 05 19:58:24 2010 us=262093   gremlin = 0
Sat Jun 05 19:58:24 2010 us=262110   status_file = 'openvpn-status.log'
Sat Jun 05 19:58:24 2010 us=262121   status_file_version = 1
Sat Jun 05 19:58:24 2010 us=262130   status_file_update_freq = 60
Sat Jun 05 19:58:24 2010 us=262139   occ = ENABLED
Sat Jun 05 19:58:24 2010 us=262147   rcvbuf = 0
Sat Jun 05 19:58:24 2010 us=262156   sndbuf = 0
Sat Jun 05 19:58:24 2010 us=262166 BEGIN http_proxy
Sat Jun 05 19:58:24 2010 us=262175   server = '10.0.0.172'
Sat Jun 05 19:58:24 2010 us=262183   port = 80
Sat Jun 05 19:58:24 2010 us=262193   auth_method_string = 'none'
Sat Jun 05 19:58:24 2010 us=262202   auth_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=262211   retry = DISABLED
Sat Jun 05 19:58:24 2010 us=262220   timeout = 5
Sat Jun 05 19:58:24 2010 us=262229   http_version = '1.0'
Sat Jun 05 19:58:24 2010 us=262238   user_agent = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=262247 END http_proxy
Sat Jun 05 19:58:24 2010 us=262257   socks_proxy_server = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=277061   socks_proxy_port = 0
Sat Jun 05 19:58:24 2010 us=277081   socks_proxy_retry = DISABLED
Sat Jun 05 19:58:24 2010 us=277090   fast_io = DISABLED
Sat Jun 05 19:58:24 2010 us=277099   comp_lzo = ENABLED
Sat Jun 05 19:58:24 2010 us=277108   comp_lzo_adaptive = ENABLED
Sat Jun 05 19:58:24 2010 us=277126   route_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=277135   route_default_gateway = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=277144   route_noexec = DISABLED
Sat Jun 05 19:58:24 2010 us=277153   route_delay = 0
Sat Jun 05 19:58:24 2010 us=277162   route_delay_window = 30
Sat Jun 05 19:58:24 2010 us=277171   route_delay_defined = ENABLED
Sat Jun 05 19:58:24 2010 us=277180   management_addr = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=277190   management_port = 0
Sat Jun 05 19:58:24 2010 us=277199   management_user_pass = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=277208   management_log_history_cache = 250
Sat Jun 05 19:58:24 2010 us=277219   management_echo_buffer_size = 100
Sat Jun 05 19:58:24 2010 us=294118   management_query_passwords = DISABLED
Sat Jun 05 19:58:24 2010 us=294138   management_hold = DISABLED
Sat Jun 05 19:58:24 2010 us=294149   shared_secret_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=294160   key_direction = 0
Sat Jun 05 19:58:24 2010 us=294169   ciphername_defined = ENABLED
Sat Jun 05 19:58:24 2010 us=294178   ciphername = 'BF-CBC'
Sat Jun 05 19:58:24 2010 us=294187   authname_defined = ENABLED
Sat Jun 05 19:58:24 2010 us=294197   authname = 'SHA1'
Sat Jun 05 19:58:24 2010 us=294205   keysize = 0
Sat Jun 05 19:58:24 2010 us=294214   engine = DISABLED
Sat Jun 05 19:58:24 2010 us=294223   replay = ENABLED
Sat Jun 05 19:58:24 2010 us=294233   mute_replay_warnings = ENABLED
Sat Jun 05 19:58:24 2010 us=294242   replay_window = 0
Sat Jun 05 19:58:24 2010 us=294251   replay_time = 0
Sat Jun 05 19:58:24 2010 us=294259   packet_id_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=294268   use_iv = ENABLED
Sat Jun 05 19:58:24 2010 us=314138   test_crypto = DISABLED
Sat Jun 05 19:58:24 2010 us=314157   tls_server = DISABLED
Sat Jun 05 19:58:24 2010 us=314166   tls_client = ENABLED
Sat Jun 05 19:58:24 2010 us=314175   key_method = 2
Sat Jun 05 19:58:24 2010 us=314185   ca_file = 'c:\OPENVPN\KEY\ca.crt'
Sat Jun 05 19:58:24 2010 us=314194   dh_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314203   cert_file = 'c:\OPENVPN\KEY\client.crt'
Sat Jun 05 19:58:24 2010 us=314213   priv_key_file = 'c:\OPENVPN\KEY\client.key'
Sat Jun 05 19:58:24 2010 us=314223   pkcs12_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314232   cryptoapi_cert = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314241   cipher_list = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314250   tls_verify = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314258   tls_remote = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314267   crl_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=314276   ns_cert_type = 0
Sat Jun 05 19:58:24 2010 us=314285   tls_timeout = 2
Sat Jun 05 19:58:24 2010 us=335250   renegotiate_bytes = 0
Sat Jun 05 19:58:24 2010 us=335269   renegotiate_packets = 0
Sat Jun 05 19:58:24 2010 us=335280   renegotiate_seconds = 3600
Sat Jun 05 19:58:24 2010 us=335289   handshake_window = 60
Sat Jun 05 19:58:24 2010 us=335298   transition_window = 3600
Sat Jun 05 19:58:24 2010 us=335307   single_session = DISABLED
Sat Jun 05 19:58:24 2010 us=335316   tls_exit = DISABLED
Sat Jun 05 19:58:24 2010 us=335325   tls_auth_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=335347   server_network = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=335358   server_netmask = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=335368   server_bridge_ip = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=335378   server_bridge_netmask = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=335388   server_bridge_pool_start = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=335399   server_bridge_pool_end = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=335409   ifconfig_pool_defined = DISABLED
Sat Jun 05 19:58:24 2010 us=335420   ifconfig_pool_start = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=356959   ifconfig_pool_end = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=356979   ifconfig_pool_netmask = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=356990   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=357001   ifconfig_pool_persist_refresh_freq = 600
Sat Jun 05 19:58:24 2010 us=357011   ifconfig_pool_linear = DISABLED
Sat Jun 05 19:58:24 2010 us=357020   n_bcast_buf = 256
Sat Jun 05 19:58:24 2010 us=357029   tcp_queue_limit = 64
Sat Jun 05 19:58:24 2010 us=357038   real_hash_size = 256
Sat Jun 05 19:58:24 2010 us=357047   virtual_hash_size = 256
Sat Jun 05 19:58:24 2010 us=357057   client_connect_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=357067   learn_address_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=357077   client_disconnect_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=357087   client_config_dir = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=357097   ccd_exclusive = DISABLED
Sat Jun 05 19:58:24 2010 us=357106   tmp_dir = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=376640   push_ifconfig_defined = DISABLED
Sat Jun 05 19:58:24 2010 us=376662   push_ifconfig_local = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=376673   push_ifconfig_remote_netmask = 0.0.0.0
Sat Jun 05 19:58:24 2010 us=376683   enable_c2c = DISABLED
Sat Jun 05 19:58:24 2010 us=376692   duplicate_cn = DISABLED
Sat Jun 05 19:58:24 2010 us=376701   cf_max = 0
Sat Jun 05 19:58:24 2010 us=376709   cf_per = 0
Sat Jun 05 19:58:24 2010 us=376718   max_clients = 1024
Sat Jun 05 19:58:24 2010 us=376728   max_routes_per_client = 256
Sat Jun 05 19:58:24 2010 us=376737   client_cert_not_required = DISABLED
Sat Jun 05 19:58:24 2010 us=376746   username_as_common_name = DISABLED
Sat Jun 05 19:58:24 2010 us=376756   auth_user_pass_verify_script = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=376766   auth_user_pass_verify_script_via_file = DISABLED
Sat Jun 05 19:58:24 2010 us=376776   client = ENABLED
Sat Jun 05 19:58:24 2010 us=376785   pull = ENABLED
Sat Jun 05 19:58:24 2010 us=396030   auth_user_pass_file = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=396052   show_net_up = DISABLED
Sat Jun 05 19:58:24 2010 us=396062   route_method = 0
Sat Jun 05 19:58:24 2010 us=396071   ip_win32_defined = DISABLED
Sat Jun 05 19:58:24 2010 us=396080   ip_win32_type = 3
Sat Jun 05 19:58:24 2010 us=396089   dhcp_masq_offset = 0
Sat Jun 05 19:58:24 2010 us=396098   dhcp_lease_time = 31536000
Sat Jun 05 19:58:24 2010 us=396107   tap_sleep = 0
Sat Jun 05 19:58:24 2010 us=396116   dhcp_options = DISABLED
Sat Jun 05 19:58:24 2010 us=396125   dhcp_renew = DISABLED
Sat Jun 05 19:58:24 2010 us=396134   dhcp_pre_release = DISABLED
Sat Jun 05 19:58:24 2010 us=396143   dhcp_release = DISABLED
Sat Jun 05 19:58:24 2010 us=396152   domain = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=396160   netbios_scope = '[UNDEF]'
Sat Jun 05 19:58:24 2010 us=396169   netbios_node_type = 0
Sat Jun 05 19:58:24 2010 us=396178   disable_nbt = DISABLED
Sat Jun 05 19:58:24 2010 us=416795 OpenVPN 2.0.5 Win32-MinGW [SSL] [LZO] built on Nov  2 2005
Sat Jun 05 19:58:24 2010 us=417039 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-

beta16 and earlier used 5000 as the default port.
Sat Jun 05 19:58:24 2010 us=417064 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more

info.
Sat Jun 05 19:58:24 2010 us=418382 LZO compression initialized
Sat Jun 05 19:58:24 2010 us=418477 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Jun 05 19:58:24 2010 us=492871 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Jun 05 19:58:24 2010 us=492920 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth

SHA1,keysize 128,key-method 2,tls-client'
Sat Jun 05 19:58:24 2010 us=492933 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth

SHA1,keysize 128,key-method 2,tls-server'
Sat Jun 05 19:58:24 2010 us=492961 Local Options hash (VER=V4): '69109d17'
Sat Jun 05 19:58:24 2010 us=492978 Expected Remote Options hash (VER=V4): 'c0103fa8'
Sat Jun 05 19:58:24 2010 us=493011 Attempting to establish TCP connection with 10.0.0.172:80
Sat Jun 05 19:58:26 2010 us=851013 TCP connection established with 10.0.0.172:80
Sat Jun 05 19:58:26 2010 us=851054 Send to HTTP proxy: 'CONNECT 58.251.46.7:443 HTTP/1.0'
Sat Jun 05 19:58:27 2010 us=851029 HTTP proxy returned: 'HTTP/1.1 403 Forbidden [ZTEOSE]'
Sat Jun 05 19:58:27 2010 us=851062 HTTP proxy returned bad status
Sat Jun 05 19:58:27 2010 us=851234 TCP/UDP: Closing socket
Sat Jun 05 19:58:27 2010 us=855388 SIGTERM[soft,init_instance] received, process exiting

大海茫茫

用VPN很慢的。。。我现在都不用了

wszgr2010

这么复杂啊啊

seaxp

Sat Jun 05 19:58:26 2010 us=851054 Send to HTTP proxy: 'CONNECT 58.251.46.7:443 HTTP/1.0'
Sat Jun 05 19:58:27 2010 us=851029 HTTP proxy returned: 'HTTP/1.1 403 Forbidden [ZTEOSE]'
Sat Jun 05 19:58:27 2010 us=851062 HTTP proxy returned bad status

这两句出现了问题。在建立172的443连接时候出现了问题。

Sat Jun 05 19:58:24 2010 us=493011 Attempting to establish TCP connection with 10.0.0.172:80
Sat Jun 05 19:58:26 2010 us=851013 TCP connection established with 10.0.0.172:80

这两句说明172的80端口工作正常，可能是443端口封掉了。