Collegamento Synology ad una VPN

[antcav]

Ciao, mi ritrovo a dover affrontare questa configurazione insolita

Assodato che la mia sim kena 4G ha il NAT chiuso, vorrei sfruttare l'IP statico di un pc per poter collegare il nas via VPN

Su questo PC c'è windows 7 sul quale è installato OpenVPN server e funziona benissimo (l'unico client che si collega è un pc con windows 10)

Ora dal Synology mi ritrovo questa schermata di configurazione



ed ho configurato le varie voci così



Purtroppo quando vado a creare la VPN mi dice che le informazioni presenti nel file client.ovpn non sono corrette

Questo è quanto scritto nel file client.ovpn

remote IP Pubblico
client
port 1194

proto tcp4-client
dev tap

tls-client
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
remote-cert-tls server

mssfix 1450

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\ClientVPN.crt"
key "C:\\Program Files\\OpenVPN\\config\\ClientVPN.key"

cipher AES-128-CBC
comp-lzo

persist-key
persist-tun

verb 3
mute 20


Mi rendo conto che dovrei ottimizzare questo file ad hoc per farlo riconoscere al synology. Ma come?

Grazie mille

[antcav]

UP Per favore

[mrwinch]

Premesso che la mia esperienza di openVPN riguarda XigmaNAS e non Synology, vedendo il tuo file .opvn mi paiono strani i percorsi dei file tls-auth, ca, cert e key, che sembrano riferire a percorsi windows e non synology.
Adesso non ho sottomano i file di configurazione VPN, ma Torguard.net (servizio a pagamento) ti da un file .opvn con tutti i certificati/chiavi in un solo file.
Personalmente, proverei in primis, a togliere i collegamenti ai file tls-auth, ca, cert e key, caricarli nel Synology ed usare il percorso di questi inserendoli alle voci relative (file ca -> "Certificato CA:",...).

[antcav]

Originariamente inviato da mrwinch

Premesso che la mia esperienza di openVPN riguarda XigmaNAS e non Synology, vedendo il tuo file .opvn mi paiono strani i percorsi dei file tls-auth, ca, cert e key, che sembrano riferire a percorsi windows e non synology.
Adesso non ho sottomano i file di configurazione VPN, ma Torguard.net (servizio a pagamento) ti da un file .opvn con tutti i certificati/chiavi in un solo file.
Personalmente, proverei in primis, a togliere i collegamenti ai file tls-auth, ca, cert e key, caricarli nel Synology ed usare il percorso di questi inserendoli alle voci relative (file ca -> "Certificato CA:",...).

Ciao, in effetti avevo notato che i percorsi si riferivano a Windows e dovevano essere cambiati
In merito al percorso, come faccio a capire in quale vanno salvati i singoli certificati richiesti?
Io li carico, ma non ne ho idea in quale cartella si vanno a posizionare

[mrwinch]

Originariamente inviato da antcav

Ciao, in effetti avevo notato che i percorsi si riferivano a Windows e dovevano essere cambiati
In merito al percorso, come faccio a capire in quale vanno salvati i singoli certificati richiesti?
Io li carico, ma non ne ho idea in quale cartella si vanno a posizionare

Beh, la directory di destinazione dei file, dovresti sceglierla tu al momento del caricamento: premendo il tasto "sfoglia", poi dovresti ritrovare directory e files...

[Katsaros]

Originariamente inviato da mrwinch

caricarli nel Synology ed usare il percorso di questi inserendoli alle voci relative (file ca -> "Certificato CA:",...).

Originariamente inviato da mrwinch

Beh, la directory di destinazione dei file, dovresti sceglierla tu al momento del caricamento: premendo il tasto "sfoglia", poi dovresti ritrovare directory e files...

No, non funziona così. Con "Sfoglia" scegli i file in locale e fai browsing delle directory del tuo PC, non del NAS...
I certificati e la chiave vanno a finire in una directory predefinita, credo /usr/syno/etc/synovpnclient/openvpn

Inoltre, perché "dev tap"? Pensavo piuttosto "dev tun".

In ogni caso continuo a non condividere la strategia di @antcav nell'insistere ad aprire thread a destra e manca...
c'è un intero thread dedicato a Synology DSM con gente che usa abitualmente client OpenVPN. Posta di là!

[antcav]

Nessuna strategia
Semplicemente era un thread che meritava un attenzione diversa per questo ho deciso di creare una discussione a parte
Purtroppo in rete trovo il mondo per openvpn lato server ma per il mio specifico problema poco e nulla
Grazie


Inviato dal mio iPhone utilizzando Tapatalk

[mrwinch]

Originariamente inviato da Katsaros

No, non funziona così. Con "Sfoglia" scegli i file in locale e fai browsing delle directory del tuo PC, non del NAS...
I certificati e la chiave vanno a finire in una directory predefinita, credo /usr/syno/etc/synovpnclient/openvpn

Inoltre, perché "dev tap"? Pensavo piuttosto "dev tun".

In ogni caso continuo a non condividere la strategia di @antcav nell'insistere ad aprire thread a destra e manca...
c'è un intero thread dedicato a Synology DSM con gente che usa abitualmente client OpenVPN. Posta di là!

[antcav]

Originariamente inviato da mrwinch

Ragazzi questo file viene digerito dal synology (nel senso che non mi da l'errore "le informazioni presenti nel file client.ovpn non sono corrette")

client
dev tun
proto udp
remote x.x.x.x 1194
tls-client
remote-cert-tls server
mssfix 1450
cipher AES-128-CBC
comp-lzo
persist-key
persist-tun
verb 3
mute 20
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIHGTCCBQGgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBnTELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFuY2lzY28xEDAOBgNVBAoTB09w
ZW5WUE4xETAPBgNVBAsTCGNoYW5nZW1lMREwDwYDVQQDEwhjaGFuZ2VtZTERMA8G
A1UEKRMIY2hhbmdlbWUxHzAdBgkqhkiG9w0BCQEWEG1haWxAaG9zdC5kb21haW4w
HhcNMjEwMjIzMTQzOTQ3WhcNMzEwMjIxMTQzOTQ3WjCBnjELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFuY2lzY28xEDAOBgNVBAoTB09w
ZW5WUE4xETAPBgNVBAsTCGNoYW5nZW1lMRIwEAYDVQQDEwlDbGllbnRWUE4xETAP
BgNVBCkTCGNoYW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWlu
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxDrS0kHvrM4Dgn5QE+QI
9T3UunTZlGbF0oftETKF8NErucF0Ylh7dz9XFNAAMsovp2So7zCzXhe9q+3EJSFp
A0OSGkz39YVK4xpyGWR8raSHu8u673B/7Yg0XMx8/iUBHvV9UfPVfZl1It1AoaXm
s2FmXtJOn1Moor71nz4KwZpZPvg0nzPt2VXiOfN5QD+L2xLG2LkMr6esmknB8pjD
sdJjw4Qle6JtB7HjeDEs5Hq+Y1xVN6zcIzTU8GX/D9z2AI1qP6NkfEtC27ml3bol
fcKSBzno7GIb1sC0edvs6tMMotE2oZHIdgd4pllxmIA1WVLwngkGY/L435hArTbY
pCQ481nxidH2uv5Hm30Xk1Hve8IrSfLC49YMhPxgsABiN/FppAlEwfo7jmF3BFgX
cmxD2eq0FNiHQMqqF89+x25EgdFssRvJ854ASb+gsAOB7KPML8w82ivkzLyz0ChK
KuCMa7w7Knj/gFHTAaWqfK7AgnUZrrRy9kXONgQFOlWGNaNM2WR5w58ceVdoJF78
jyfcux0fIgq/UMA6SIfmJGEYDvYIAVxHim0R98wJc1xN9b9N5rc2nIWUyP+OwRMs
baiD62HpYx6mdOn4X0Fg+8AGE4ipLNiebs7Q7OnLbllxTYO8366FdTLKFjdRJRk4
/I24Zp1Hx3rKH8LdrIQB0wUCAwEAAaOCAV8wggFbMAkGA1UdEwQCMAAwLQYJYIZI
AYb4QgENBCAWHkVhc3ktUlNBIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
FgQUIUDw5MGnCQl3W54xoxU9SLcLPW8wgd0GA1UdIwSB1TCB0oAUrI6k8dtZr8RT
LvkAudAI/OrnspehgaOkgaAwgZ0xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTEV
MBMGA1UEBxMMU2FuRnJhbmNpc2NvMRAwDgYDVQQKEwdPcGVuVlBOMREwDwYDVQQL
EwhjaGFuZ2VtZTERMA8GA1UEAxMIY2hhbmdlbWUxETAPBgNVBCkTCGNoYW5nZW1l
MR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWlughQHB5csz3Igh0LrpaHo
efwyBqacnzATBgNVHSUEDDAKBggrBgEFBQcDAjALBgNVHQ8EBAMCB4AwDQYJKoZI
hvcNAQELBQADggIBAAhWOTqid3kghn3TQ359LYpX9MWUAHYTu4iJNrft4QPbvbpm
2AjwG3qExuVOikyqiZN+z+bk0amhEwKMa05iHcVuhrC4XqrebC9byFWE0swAKnNU
l2dfZyMDknl1oshoUmgk5VhlUgDld7f7wtjw1HMyAmP69Jbx9RDTyrsk9F8CnaWf
+RFXmikzs1zk+s+6xV9lQ+7mVutfJA+B820DKzldE5YE9sCcwep7oSc/1VasCXsK
vNCk+lYBqLCJkTUnTaaGmEETv9jvtV6v5FTZf1JJ8ghed8hPvtP7u+l/XaNA4FrW
HgmfnMSmlO5Psdl9F2MxGNtrvjm0Lxx0Jo9feV8xqwbt4eEFqBpiQngNIvNbHMlV
FKM0NJ9Mn3D9ekyb1NuJ9uVEHduDw9+2FdtpVOjtQgwSrIdCiLbxTZS/4vzYBl5V
5Cltcry98KhdLD/NvBZPSeBjpq6MnjDsJQ5T5PJY66bEjFwvJlsAIEnKEwAhrlBc
A8AYXENHbl5/b3Ws1Eo3aAuheFJWOBtqrrtH5jni/F7RyzlJptZjmRihwHeKDvHL
akyihkQA87GExmx3NGvYMjEMASEymJhiIPg36H8aSUOAYb/SkAW2oupIQCMlwxQZ
GjHSRNUI7kYJWDaf+JIZqrHOzAGOvwviKnZLCGVZi5eZzNSol9rqSgjA22Ha
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
e2a57086687b849d3be431c0262d2638
8c29c591fff5f79b7cb9aa2a70d73bc7
272839271ebee992fcc22f18d93bdf65
71804c96c834718fa31c87b04e5f9fb4
707a351e66d870855624634bdcdb5ee3
4c397b36da13ae2c7d59f94a54816eb5
72ba637cb97d198fe3e840a4c8fceaa2
6daee5785aa2bc6ca61f1bcd38b1bf44
eb2443b5d92c44e1c321c8b3979fd5e2
223b8cab86247cdd35724c4495c51eca
01038e0a44f00ede21140cb1b496a209
b2115e2106eee1b6435d0d2f3cf1a2b5
21808e0478ca2f04d1f1e61c725a838c
a172c9a6b7ddeaccce842dfd6f642679
85dbb783c5ac9f02d377a751d900e58f
e7ea3321743fa3e5baaf5166f5b8df5c
-----END OpenVPN Static key V1-----
</tls-auth>

Questo è quello che mi interessa ma purtroppo non lo digerisce.
Quali potrebbero essere i parametri incompatibili?

client
dev tun
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
remote-cert-tls server
tls-version-min 1.2
verify-x509-name raspiopevpn_905cc5ce-cb83-41ca-8c02-a9cd1f839f9c name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAgqAQ7wnZFa4QICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIVDaJluhpFIsEgZAgy0sw7lCbPN8U
VUIO1g+RpYwqsMKdnNOYVHez4PV6gzxwz0xsjU04RMVmwoXBxyGVlIgdrbWdM8PY
zDa1eWgcuCAmRm/5zE2WXtXqiWoglS8KJ7BOZvFxa0428xPIK8eqlLiZg8a00BFL
Co1TSoUa53b6pRctR/0SxmN/JYYlwcml758ZLmDou92W9qpz8oo=
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
60e44967d2e65e43bf61be895880123b
537451eb7b1420ae74a2f7bfefa136c3
fb566583cde7a18421966043510185bc
6ba4eec600cf10be454357459ece0da7
eb59a1e0d66d499abaa4b80141d60f68
ee7f22e0aa150312ef1ab0a51b298457
fb8890ab56495cf35a0e14c015970664
de6c7e85f30cea2e51130c88983fc60b
4d7dba390bd02811a2bfd2fd6fb65662
f02220291f54e59332fef99da77b3c09
7399299ccbdc637e5f478c808071abd5
1b63424b98e380e5c33e7a10d2214ce1
65b7a0c3e4f398e58b2812ee9295cc8c
b420a53d7af5549ec837e812181e85d4
c8fef9c275a9067055b0c66e680daedc
9cb8af8d93889007111ff5c150c179a9
-----END OpenVPN Static key V1-----
</tls-crypt>