RT-AC88U OpenV*N设置问题

toydemo

总是提示错误，请大佬看一下哪里错了。谢谢！！
Dec 14 10:37:04 rc_service: httpd 21690:notify_rc start_vpnclient1
Dec 14 10:37:05 ovpn-client1[19276]: OpenVPN 2.5.3 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug  6 2021
Dec 14 10:37:05 ovpn-client1[19276]: library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.08
Dec 14 10:37:05 ovpn-client1[19277]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 14 10:37:05 ovpn-client1[19277]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:37:05 ovpn-client1[19277]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:37:05 ovpn-client1[19277]: TCP/UDP: Preserving recently used remote address: [AF_INET]103.109.103.59:53
Dec 14 10:37:05 ovpn-client1[19277]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Dec 14 10:37:05 ovpn-client1[19277]: UDP link local: (not bound)
Dec 14 10:37:05 ovpn-client1[19277]: UDP link remote: [AF_INET]103.109.103.59:53
Dec 14 10:38:05 ovpn-client1[19277]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 14 10:38:05 ovpn-client1[19277]: TLS Error: TLS handshake failed
Dec 14 10:38:05 ovpn-client1[19277]: SIGUSR1[soft,tls-error] received, process restarting
Dec 14 10:38:05 ovpn-client1[19277]: Restart pause, 5 second(s)
Dec 14 10:38:10 ovpn-client1[19277]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 14 10:38:10 ovpn-client1[19277]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:38:10 ovpn-client1[19277]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:38:10 ovpn-client1[19277]: TCP/UDP: Preserving recently used remote address: [AF_INET]103.109.103.201:53
Dec 14 10:38:10 ovpn-client1[19277]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Dec 14 10:38:10 ovpn-client1[19277]: UDP link local: (not bound)
Dec 14 10:38:10 ovpn-client1[19277]: UDP link remote: [AF_INET]103.109.103.201:53
Dec 14 10:39:10 ovpn-client1[19277]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 14 10:39:10 ovpn-client1[19277]: TLS Error: TLS handshake failed
Dec 14 10:39:10 ovpn-client1[19277]: SIGUSR1[soft,tls-error] received, process restarting
Dec 14 10:39:10 ovpn-client1[19277]: Restart pause, 5 second(s)
Dec 14 10:39:15 ovpn-client1[19277]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 14 10:39:15 ovpn-client1[19277]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:39:15 ovpn-client1[19277]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:39:16 ovpn-client1[19277]: TCP/UDP: Preserving recently used remote address: [AF_INET]103.109.103.59:53
Dec 14 10:39:16 ovpn-client1[19277]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Dec 14 10:39:16 ovpn-client1[19277]: UDP link local: (not bound)
Dec 14 10:39:16 ovpn-client1[19277]: UDP link remote: [AF_INET]103.109.103.59:53
Dec 14 10:40:16 ovpn-client1[19277]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 14 10:40:16 ovpn-client1[19277]: TLS Error: TLS handshake failed
Dec 14 10:40:16 ovpn-client1[19277]: SIGUSR1[soft,tls-error] received, process restarting
Dec 14 10:40:16 ovpn-client1[19277]: Restart pause, 5 second(s)
Dec 14 10:40:21 ovpn-client1[19277]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 14 10:40:21 ovpn-client1[19277]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:40:21 ovpn-client1[19277]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Dec 14 10:40:27 ovpn-client1[19277]: TCP/UDP: Preserving recently used remote address: [AF_INET]103.109.103.61:53
Dec 14 10:40:27 ovpn-client1[19277]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Dec 14 10:40:27 ovpn-client1[19277]: UDP link local: (not bound)
Dec 14 10:40:27 ovpn-client1[19277]: UDP link remote: [AF_INET]103.109.103.61:53

微信扫一扫，阅读更方便^_^

Master

先把OpenVPN服务器关闭，只做OpenVPN客户端，将远端服务器提供的.ovpn导入，填入正确的账密。

不行的话，你网上找一下OpenVPN GUI，用这个工具验证看能不能连线远端OpenVPN服务器。

toydemo

Master 发表于 2021-12-14 14:05
先把OpenVPN服务器关闭，只做OpenVPN客户端，将远端服务器提供的.ovpn导入，填入正确的账密。

不行的话， ...

谢谢提醒。OpenVPN GUI测试后显示：
Tue Dec 14 21:26:06 2021 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 14 21:26:06 2021 TLS Error: TLS handshake failed
是HTTPS/SSL 证书错误？

toydemo

更换1194 端口并改为TCP通道后，连接到IP，还是无法上网，客户端提示：Internet not redirected！

Master

toydemo 发表于 2021-12-14 21:37
谢谢提醒。OpenVPN GUI测试后显示：
Tue Dec 14 21:26:06 2021 TLS Error: TLS key negotiation failed t ...

Tue Dec 14 21:26:06 2021 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 14 21:26:06 2021 TLS Error: TLS handshake failed

-- 这个和Let's Encrypt免费证书无关，证书用来证明你路由器的管理页面是可以进行安全访问的。

Master

toydemo 发表于 2021-12-14 23:08
更换1194 端口并改为TCP通道后，连接到IP，还是无法上网，客户端提示：Internet not redirected！

更换1194 端口并改为TCP通道后，连接到IP，还是无法上网，客户端提示：Internet not redirected！

-- 需确认你的OpenVPN服务器，“客户端使用VPN访问网络”设定项，是LAN only，还是Internet only，还是Both

toydemo

Master 发表于 2021-12-15 09:18
更换1194 端口并改为TCP通道后，连接到IP，还是无法上网，客户端提示：Internet not redirected！

-- 需 ...

谢谢提醒。无论是LAN only，还是Internet only，还是Both都无法连接网络。OpenVPN GUI测试TCP通道
Fri Dec 17 22:48:25 2021 SIGUSR1[connection failed(soft),init_instance] received, process restarting
Fri Dec 17 22:48:30 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]103.109.103.60:80
Fri Dec 17 22:48:30 2021 Attempting to establish TCP connection with [AF_INET]103.109.103.60:80 [nonblock]
Fri Dec 17 22:50:31 2021 TCP: connect to [AF_INET]103.109.103.60:80 failed: Unknown error
Fri Dec 17 22:50:31 2021 SIGUSR1[connection failed(soft),init_instance] received, process restarting。
请教是什么原因，代码都没有

Master

toydemo 发表于 2021-12-17 22:53
谢谢提醒。无论是LAN only，还是Internet only，还是Both都无法连接网络。OpenVPN GUI测试TCP通道
Fri Dec ...

你RT-AC88U做为OpenVPN客户端，连接的OpenVPN服务器是hk2-ovpn-tcp.pointtoserver.com，需要跟这一台OpenVPN服务器确认，连上之后是否可以透过它访问Internet，还是只能访问这台服务器端的局域网。