Community Support Forum
 
  OpenVPN.net  •  Forum Index  •  FAQ  

It is currently Sun Oct 26, 2014 3:39 am


Forum rules


If you would like help, here is a few things you will want to do in order to help us help you.

**Post your configs from client and server, without comments. you can strip comments in linux/bsd with something like this:
grep -vE '^#|^;|^$' server.conf
**Tell us your goal.
**If you are having problems connecting, post your logfiles from server and client after using verb 4 in both configs


Also, there are 2 things you should be aware of:

**Sometimes you cannot avoid tunneling over tcp, but if you can avoid it, DO. Why TCP Over TCP Is A Bad Idea: http://sites.inka.de/~bigred/devel/tcp-tcp.html
**You ONLY want to use dev tap if you are tunneling layer2 traffic, if you are using IP traffic you want tun. If you are using tap only for windows file sharing, look into running a WINS server instead.



Post new topic Reply to topic  [ 8 posts ] 
 Windows client connection problem 
Author Message
 Post subject: Windows client connection problem
PostPosted: Thu Mar 01, 2012 1:12 pm 
OpenVpn Newbie

Joined: Tue Feb 28, 2012 2:27 pm
Posts: 4
Hello,

I have problem with one (and the only one) Windows 7 client - it say "connected", but it cannot ping the server (the server is linux). I used the same client configuration for another windows 7 client and it works...

Windows user is Administrator. I tried (but without any posive results): disable firewall, disable ip v 6 on tap adapter, reset internet catalog.

I have no clue. All of your feedback would be greatly appreciated.

Client configuration
Code:
remote [...deleted...] 6100
proto udp
tls-client
dev tun
pull

pkcs12 cert.p12

mute 5
verb 5

comp-lzo

tls-remote [...deleted...]

ns-cert-type server

persist-tun
route-delay 30 30


Client log
Code:
Thu Mar 01 13:10:00 2012 us=343000 Current Parameter Settings:
Thu Mar 01 13:10:00 2012 us=358000   config = 'klient.ovpn'
Thu Mar 01 13:10:00 2012 us=358000   mode = 0
Thu Mar 01 13:10:00 2012 us=358000   show_ciphers = DISABLED
Thu Mar 01 13:10:00 2012 us=358000   show_digests = DISABLED
Thu Mar 01 13:10:00 2012 us=358000 NOTE: --mute triggered...
Thu Mar 01 13:10:00 2012 us=358000 267 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 13:10:00 2012 us=358000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov  8 2010
Thu Mar 01 13:10:00 2012 us=358000 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Mar 01 13:10:00 2012 us=358000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Mar 01 13:10:06 2012 us=489000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Mar 01 13:10:06 2012 us=505000 LZO compression initialized
Thu Mar 01 13:10:06 2012 us=505000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Mar 01 13:10:06 2012 us=505000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 01 13:10:06 2012 us=505000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Mar 01 13:10:06 2012 us=505000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 01 13:10:06 2012 us=505000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 01 13:10:06 2012 us=505000 Local Options hash (VER=V4): '41690919'
Thu Mar 01 13:10:06 2012 us=505000 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 01 13:10:06 2012 us=505000 UDPv4 link local (bound): [undef]:1194
Thu Mar 01 13:10:06 2012 us=505000 UDPv4 link remote: 172.17.24.102:6100
Thu Mar 01 13:10:06 2012 us=505000 TLS: Initial packet from 172.17.24.102:6100, sid=63ff229d 1dcdf06e
Thu Mar 01 13:10:06 2012 us=536000 VERIFY OK: depth=1, [...deleted...]
Thu Mar 01 13:10:06 2012 us=536000 VERIFY OK: nsCertType=SERVER
Thu Mar 01 13:10:06 2012 us=536000 VERIFY X509NAME OK: [...deleted...]
Thu Mar 01 13:10:06 2012 us=536000 VERIFY OK: depth=0, [...deleted...]
Thu Mar 01 13:10:06 2012 us=598000 NOTE: --mute triggered...
Thu Mar 01 13:10:06 2012 us=598000 5 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 13:10:06 2012 us=598000 [...deleted...] Peer Connection Initiated with 172.17.24.102:6100
Thu Mar 01 13:10:09 2012 us=1000 SENT CONTROL [...deleted...]: 'PUSH_REQUEST' (status=1)
Thu Mar 01 13:10:09 2012 us=1000 PUSH: Received control message: 'PUSH_REPLY,route 172.16.0.0 255.255.0.0,route 172.17.0.0 255.255.0.0,route 172.20.0.0 255.255.0.0,route 10.201.0.0 255.255.0.0,dhcp-option DNS 172.17.26.26,dhcp-option DOMAIN server.com,dhcp-option WINS 172.16.21.101,dhcp-option NTP 172.17.24.100,ping 10,ping-restart 60,ifconfig 172.18.254.6 172.18.254.5'
Thu Mar 01 13:10:09 2012 us=1000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 01 13:10:09 2012 us=1000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 01 13:10:09 2012 us=1000 OPTIONS IMPORT: route options modified
Thu Mar 01 13:10:09 2012 us=1000 NOTE: --mute triggered...
Thu Mar 01 13:10:09 2012 us=1000 1 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 13:10:09 2012 us=1000 ROUTE default_gateway=[...deleted...]
Thu Mar 01 13:10:09 2012 us=1000 TAP-WIN32 device [Připojení k místní síti 2] opened: \\.\Global\{1F7497FA-6735-457A-B93D-29294929FECD}.tap
Thu Mar 01 13:10:09 2012 us=1000 TAP-Win32 Driver Version 9.7
Thu Mar 01 13:10:09 2012 us=1000 TAP-Win32 MTU=1500
Thu Mar 01 13:10:09 2012 us=1000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.18.254.6/255.255.255.252 on interface {1F7497FA-6735-457A-B93D-29294929FECD} [DHCP-serv: 172.18.254.5, lease-time: 31536000]
Thu Mar 01 13:10:09 2012 us=1000 DHCP option string: 0f0b756e 6973636f 6d702e63 7a0604ac 111a1a2c 04ac1015 652a04ac 111864
Thu Mar 01 13:10:09 2012 us=1000 NOTE: FlushIpNetTable failed on interface [22] {1F7497FA-6735-457A-B93D-29294929FECD} (status=1168) : Prvek nebyl nalezen.
Thu Mar 01 13:10:39 2012 us=374000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:39 2012 us=374000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:41 2012 us=558000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:41 2012 us=558000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:42 2012 us=572000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:42 2012 us=572000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:43 2012 us=586000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:43 2012 us=586000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:44 2012 us=600000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:44 2012 us=600000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:45 2012 us=614000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:45 2012 us=614000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:46 2012 us=628000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:46 2012 us=628000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:47 2012 us=642000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:47 2012 us=642000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:48 2012 us=656000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:48 2012 us=656000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:49 2012 us=15000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:49 2012 us=15000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:50 2012 us=138000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:50 2012 us=138000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:51 2012 us=261000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:51 2012 us=261000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:52 2012 us=385000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:52 2012 us=385000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:53 2012 us=508000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:53 2012 us=508000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:54 2012 us=631000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:54 2012 us=631000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:55 2012 us=754000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:55 2012 us=754000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:56 2012 us=877000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:56 2012 us=877000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:58 2012 us=1000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:58 2012 us=1000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:59 2012 us=935000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:59 2012 us=935000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:01 2012 us=89000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:01 2012 us=89000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:02 2012 us=244000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:02 2012 us=244000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:03 2012 us=398000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:03 2012 us=398000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:04 2012 us=553000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:04 2012 us=553000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:05 2012 us=707000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:05 2012 us=707000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:06 2012 us=861000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:06 2012 us=861000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:08 2012 us=16000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:08 2012 us=16000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:10 2012 us=13000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:10 2012 us=13000 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.0.0] and remote VPN [172.16.0.0/255.255.0.0]
Thu Mar 01 13:11:10 2012 us=13000 C:\WINDOWS\system32\route.exe ADD 172.16.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=13000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=13000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=13000 Route addition fallback to route.exe
 OK!
Thu Mar 01 13:11:10 2012 us=44000 C:\WINDOWS\system32\route.exe ADD 172.17.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=44000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=44000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=44000 Route addition fallback to route.exe
 OK!
Thu Mar 01 13:11:10 2012 us=91000 C:\WINDOWS\system32\route.exe ADD 172.20.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=106000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=106000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=106000 Route addition fallback to route.exe
 OK!
Thu Mar 01 13:11:10 2012 us=137000 C:\WINDOWS\system32\route.exe ADD 10.201.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=137000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=137000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=137000 Route addition fallback to route.exe
 OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 172.16.40.1 p=0 i=10 t=4 pr=3 a=104 h=0 m=20/0/0/0/0
10.201.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
172.16.0.0 255.255.0.0 172.16.23.8 p=0 i=10 t=3 pr=3 a=104 h=0 m=276/0/0/0/0
172.16.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
172.16.23.8 255.255.255.255 172.16.23.8 p=0 i=10 t=3 pr=3 a=104 h=0 m=276/0/0/0/0
172.16.255.255 255.255.255.255 172.16.23.8 p=0 i=10 t=3 pr=3 a=104 h=0 m=276/0/0/0/0
172.17.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
172.20.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 172.16.23.8 p=0 i=10 t=3 pr=3 a=113 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 172.16.23.8 p=0 i=10 t=3 pr=3 a=113 h=0 m=276/0/0/0/0
SYSTEM ADAPTER LIST
Microsoft Virtual WiFi Miniport Adapter
  Index = 16
  GUID = {3F455EFE-3B35-437C-8EDB-95633380762C}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ed
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 13:11:10 2012
  DHCP LEASE EXPIRES  = Thu Mar 01 13:11:10 2012
  DNS SERV =
Intel(R) Centrino(R) Advanced-N 6205
  Index = 13
  GUID = {2D5F076F-A7E7-4E47-9F59-527C44CF0295}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ec
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 13:11:10 2012
  DHCP LEASE EXPIRES  = Thu Mar 01 13:11:10 2012
  DNS SERV =
Intel(R) 82579LM Gigabit Network Connection
  Index = 10
  GUID = {736B7E08-D63A-44D3-A1DB-B9BC565D959B}
  IP = 172.16.23.8/255.255.0.0
  MAC = 2c:76:8a:e1:76:20
  GATEWAY = 172.16.40.1/255.255.255.255
  DHCP SERV = 172.16.21.116/255.255.255.255
  DHCP LEASE OBTAINED = Thu Mar 01 13:09:26 2012
  DHCP LEASE EXPIRES  = Fri Mar 02 13:09:26 2012
  DNS SERV = 172.17.26.26/255.255.255.255 172.17.24.100/255.255.255.255
Thu Mar 01 13:11:10 2012 us=200000 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )


Server log
Code:
Thu Mar  1 13:10:06 2012 us=900775 172.16.23.8:1194 [User_Name] Peer Connection Initiated with 172.16.23.8:1194
Thu Mar  1 13:10:06 2012 us=911766 User_Name/172.16.23.8:1194 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_0b421a282845196cac549
503cbecb4d4.tmp
Thu Mar  1 13:10:06 2012 us=911906 User_Name/172.16.23.8:1194 MULTI: Learn: 172.18.254.6 -> User_Name/172.16.23.8:1194
Thu Mar  1 13:10:06 2012 us=911931 User_Name/172.16.23.8:1194 MULTI: primary virtual IP for User_Name/172.16.23.8:1194: 172.18.254.6
Thu Mar  1 13:10:09 2012 us=291244 User_Name/172.16.23.8:1194 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar  1 13:10:09 2012 us=291372 User_Name/172.16.23.8:1194 SENT CONTROL [User_Name]: 'PUSH_REPLY,route 172.16.0.0 255.255.0.0,route 172.17.0.0 255.255.0.0,route 172.20.0.0 255.255.0.0,route 10.201.0.0 255.255.0.0,dhcp-option DNS 172.17.26.26,dhcp-option DOMAIN server.com,dhcp-option WINS 172.16.21.101,dhcp-option NTP 172.17.24.100,ping 10,ping-restart 60,ifconfig 172.18.254.6 172.18.254.5' (status=1)


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Thu Mar 01, 2012 2:18 pm 
Forum Team
User avatar

Joined: Wed Jan 12, 2011 9:23 am
Posts: 3079
Location: Athens,Greece
Quote:
WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.0.0] and remote VPN [172.16.0.0/255.255.0.0]



it says more than enough....

also your pc

Quote:
IP = 172.16.23.8/255.255.0.0


oops...

what ip your linux server has?

Michael.


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Thu Mar 01, 2012 2:35 pm 
Forum Team
User avatar

Joined: Fri Aug 20, 2010 2:57 pm
Posts: 2702
Location: Amsterdam
sounds like the tap-win32 adapter is not coming up correctly (or quickly enough) ; add
Code:
route-delay 5 30

to the client config; also check that the tap-win32 adapter is configured for automatic (DHCP) addresses.

On a final note, consider upgrading to openvpn 2.2.2, as it works better on Windows 7.


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Fri Mar 02, 2012 7:30 am 
OpenVpn Newbie

Joined: Tue Feb 28, 2012 2:27 pm
Posts: 4
Thank you for your advice.

I copied new (and better) log from the client. It is connection from another site than 172.16.0.0. Version of client is 2.2.2.

I still can not ping any server in private network (for example anything in 172.16.0.0/B or 172.18.0.0/B).

Code:
Thu Mar 01 17:38:50 2012 us=534000 Current Parameter Settings:
Thu Mar 01 17:38:50 2012 us=550000   config = 'klient.ovpn'
Thu Mar 01 17:38:50 2012 us=550000   mode = 0
Thu Mar 01 17:38:50 2012 us=550000   show_ciphers = DISABLED
Thu Mar 01 17:38:50 2012 us=550000   show_digests = DISABLED
Thu Mar 01 17:38:50 2012 us=550000 NOTE: --mute triggered...
Thu Mar 01 17:38:50 2012 us=550000 268 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 17:38:50 2012 us=550000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Mar 01 17:38:50 2012 us=550000 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Mar 01 17:38:50 2012 us=550000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Mar 01 17:38:54 2012 us=684000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Mar 01 17:38:54 2012 us=684000 LZO compression initialized
Thu Mar 01 17:38:54 2012 us=684000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Mar 01 17:38:54 2012 us=684000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 01 17:38:54 2012 us=778000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Mar 01 17:38:54 2012 us=778000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 01 17:38:54 2012 us=778000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 01 17:38:54 2012 us=778000 Local Options hash (VER=V4): '41690919'
Thu Mar 01 17:38:54 2012 us=778000 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 01 17:38:54 2012 us=778000 UDPv4 link local (bound): [undef]:1194
Thu Mar 01 17:38:54 2012 us=778000 UDPv4 link remote: [...our server public ip...]:6100
Thu Mar 01 17:38:54 2012 us=871000 TLS: Initial packet from [...our server public ip...]:6100, sid=8189557c 8eeaa859
Thu Mar 01 17:38:55 2012 us=745000 VERIFY OK: depth=1, [...deleted...]
Thu Mar 01 17:38:55 2012 us=745000 VERIFY OK: nsCertType=SERVER
Thu Mar 01 17:38:55 2012 us=745000 VERIFY X509NAME OK: [...deleted...]
Thu Mar 01 17:38:55 2012 us=745000 VERIFY OK: depth=0, [...deleted...]
Thu Mar 01 17:38:56 2012 us=712000 NOTE: --mute triggered...
Thu Mar 01 17:38:56 2012 us=712000 5 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 17:38:56 2012 us=712000 [...our server public dns name...] Peer Connection Initiated with [...our server public ip...]:6100
Thu Mar 01 17:38:59 2012 us=21000 SENT CONTROL [...our server public dns name...]: 'PUSH_REQUEST' (status=1)
Thu Mar 01 17:38:59 2012 us=130000 PUSH: Received control message: 'PUSH_REPLY,route 172.16.0.0 255.255.0.0,route 172.17.0.0 255.255.0.0,route 172.20.0.0 255.255.0.0,route 10.201.0.0 255.255.0.0,dhcp-option DNS 172.17.26.26,dhcp-option DOMAIN server.com,dhcp-option WINS 172.16.21.101,dhcp-option NTP 172.17.24.100,ping 10,ping-restart 60,ifconfig 172.18.254.6 172.18.254.5'
Thu Mar 01 17:38:59 2012 us=130000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 01 17:38:59 2012 us=130000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 01 17:38:59 2012 us=130000 OPTIONS IMPORT: route options modified
Thu Mar 01 17:38:59 2012 us=130000 NOTE: --mute triggered...
Thu Mar 01 17:38:59 2012 us=130000 1 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 17:38:59 2012 us=130000 ROUTE default_gateway= 85.161.182.216
Thu Mar 01 17:38:59 2012 us=130000 TAP-WIN32 device [...windows device name...] opened: \\.\Global\{683FFFA3-209F-4CE3-9E49-0BB731F043D6}.tap
Thu Mar 01 17:38:59 2012 us=130000 TAP-Win32 Driver Version 9.9
Thu Mar 01 17:38:59 2012 us=130000 TAP-Win32 MTU=1500
Thu Mar 01 17:38:59 2012 us=130000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.18.254.6/255.255.255.252 on interface {683FFFA3-209F-4CE3-9E49-0BB731F043D6} [DHCP-serv: 172.18.254.5, lease-time: 31536000]
Thu Mar 01 17:38:59 2012 us=130000 DHCP option string: 0f0b756e 6973636f 6d702e63 7a0604ac 111a1a2c 04ac1015 652a04ac 111864
Thu Mar 01 17:38:59 2012 us=130000 NOTE: FlushIpNetTable failed on interface [22] {683FFFA3-209F-4CE3-9E49-0BB731F043D6} (status=1168) : Prvek nebyl nalezen. [...'Element not found.' in english...]
Thu Mar 01 17:39:29 2012 us=316000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:29 2012 us=316000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:39 2012 us=269000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:39 2012 us=269000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:40 2012 us=502000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:40 2012 us=502000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:41 2012 us=734000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:41 2012 us=734000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:42 2012 us=966000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:42 2012 us=966000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:44 2012 us=199000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:44 2012 us=199000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:45 2012 us=431000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:45 2012 us=431000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:46 2012 us=664000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:46 2012 us=664000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:47 2012 us=896000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:47 2012 us=896000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:49 2012 us=128000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:49 2012 us=128000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:50 2012 us=330000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:50 2012 us=330000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:51 2012 us=359000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:51 2012 us=359000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:52 2012 us=389000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:52 2012 us=389000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:53 2012 us=418000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:53 2012 us=418000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:54 2012 us=448000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:54 2012 us=448000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:55 2012 us=478000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:55 2012 us=478000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:56 2012 us=507000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:56 2012 us=507000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:57 2012 us=537000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:57 2012 us=537000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:58 2012 us=566000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:58 2012 us=566000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:59 2012 us=393000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:59 2012 us=393000 C:\WINDOWS\system32\route.exe ADD 172.16.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=409000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=409000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=409000 Route addition fallback to route.exe
 OK!
Thu Mar 01 17:39:59 2012 us=424000 C:\WINDOWS\system32\route.exe ADD 172.17.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=424000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=424000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=424000 Route addition fallback to route.exe
 OK!
Thu Mar 01 17:39:59 2012 us=456000 C:\WINDOWS\system32\route.exe ADD 172.20.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=456000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=456000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=456000 Route addition fallback to route.exe
 OK!
Thu Mar 01 17:39:59 2012 us=471000 C:\WINDOWS\system32\route.exe ADD 10.201.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=487000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=487000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=487000 Route addition fallback to route.exe
 OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 85.161.182.216 p=0 i=48 t=3 pr=3 a=111 h=0 m=31/0/0/0/0
10.201.0.0 255.255.0.0 172.18.254.5 85.161.182.216  85.161.182.216 p=0 i=48 t=3 pr=3 a=111 h=0 m=31/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=213 h=0 m=4531/0/0/0/0
255.255.255.255 255.255.255.255 85.161.182.216 p=0 i=48 t=3 pr=3 a=111 h=0 m=286/0/0/0/0
SYSTEM ADAPTER LIST
Mobile internet
  Index = 48
  GUID = {D508CA9E-99D5-4F0B-9228-D50F84F51EF1}
  IP = 85.161.182.216/255.255.255.255
  MAC =
  GATEWAY = 0.0.0.0/255.255.255.255
  PRI WINS = 10.11.12.13/255.255.255.255
  SEC WINS = 10.11.12.14/255.255.255.255
  DNS SERV = 160.218.167.5/255.255.255.255 160.218.161.60/255.255.255.255
Microsoft Virtual WiFi Miniport Adapter
  Index = 16
  GUID = {3F455EFE-3B35-437C-8EDB-95633380762C}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ed
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 17:39:59 2012
  DHCP LEASE EXPIRES  = Mon Mar 23 01:01:24 1970
  DNS SERV =
Intel(R) Centrino(R) Advanced-N 6205
  Index = 13
  GUID = {2D5F076F-A7E7-4E47-9F59-527C44CF0295}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ec
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 17:39:59 2012
  DHCP LEASE EXPIRES  = Thu Jan 01 01:00:00 1970
  DNS SERV =
Intel(R) 82579LM Gigabit Network Connection
  Index = 10
  GUID = {736B7E08-D63A-44D3-A1DB-B9BC565D959B}
  IP = 0.0.0.0/0.0.0.0
  MAC = 2c:76:8a:e1:76:20
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 17:39:59 2012
  DHCP LEASE EXPIRES  = Sun Aug 13 19:24:05 1995
  DNS SERV =
Thu Mar 01 17:39:59 2012 us=627000 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )


janjust wrote:
sounds like the tap-win32 adapter is not coming up correctly (or quickly enough) ; add
Code:
route-delay 5 30


i already have this command in my config (but with '30 30'). Is it ok?

janjust wrote:
to the client config; also check that the tap-win32 adapter is configured for automatic (DHCP) addresses.
On a final note, consider upgrading to openvpn 2.2.2, as it works better on Windows 7.

I upgraded client, adapter is configured for dhcp addresses.


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Mon Mar 12, 2012 8:38 am 
OpenVpn Newbie

Joined: Tue Feb 28, 2012 2:27 pm
Posts: 4
Hello to all,

I still did not solve the problem. Do you have any new ideas, please?

Than you.


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Mon Mar 12, 2012 9:18 am 
Forum Team
User avatar

Joined: Fri Aug 20, 2010 2:57 pm
Posts: 2702
Location: Amsterdam
even in your latest client log I don't see any entries for the 'tap-win32' adapter ...
also, it seems you are using a mobile internet connection - that can cause problems when OpenVPN tries to determine the default GW; try running your setup *without* redirecting the default gateway.


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Thu Mar 15, 2012 9:49 am 
OpenVpn Newbie

Joined: Tue Feb 28, 2012 2:27 pm
Posts: 4
Hello,

I have a soultion. I use firewall (AVG) which requires special settings -- when I disabled "AVG network filter adapter" in TAP-Win32 Adapter Setting, then everything works.

Thank you all.


Offline
 Profile  
 
 Post subject: Re: Windows client connection problem
PostPosted: Sun Mar 18, 2012 9:35 pm 
OpenVpn Newbie

Joined: Sun Mar 18, 2012 9:31 pm
Posts: 1
Location: Spain
It's a permissions issue!

Right click on OpenVPN and click 'Run as Administrator' - even if you are already logged in as an Administrator you still need to do this because of the functions OpenVPN is performing.

Hope it helps,

Aled.


Offline
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 


 Who is online 

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


phpBB SEO
[ Time : 0.081s | 14 Queries | GZIP : On ]

 
Index  |  FAQ


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group