Hello everyone,
I have successfully set up OpenVPN server that's been running fine for half a year, except for one REALLY annoying exception:
Windows hosts often complain that they connect successfully, but they actually cannot access/ping anything in the internal network. I have found that the problem lies in the route addition, which on WINDOWS sometimes says "OK!" but does not add the route.
- - openVPN is ran with full administrator privileges
- disable/enable on TAP driver does not work
- "route print" reveals that no route is added for the protected net. Manual attempts to add the route result in a wonderful "OK!" and error code 0, but route is actually not added
- ALL firewalls and anti-virus software are stopped
- Creating a new TAP adapter does not work
- There are no overlapping network addresses
- "route-method ipapi" and "route-method exe" give no result
- "route-delay 5" gives no result
- SOMETIMES the routes are just added fine and VPN works fine. Sometimes.
- Other VPN Software works fine even if OpenVPN does not work (i.e. there Is a way for the VPN to work, just VPN does not work sometimes)
Here is the log on the client side (client is configured correctly with a static IP address of 10.8.0.246/30 - i have set up the OpenVPN not to use DHCP in order to avoid another issue)
Mon Apr 02 15:11:34 2012 us=634000 Current Parameter Settings:
Mon Apr 02 15:11:34 2012 us=634000 config = 'Marathon_1.ovpn'
Mon Apr 02 15:11:34 2012 us=634000 mode = 0
Mon Apr 02 15:11:34 2012 us=634000 show_ciphers = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 show_digests = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 show_engines = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 genkey = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 key_pass_file = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 show_tls_ciphers = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 Connection profiles [default]:
Mon Apr 02 15:11:34 2012 us=634000 proto = udp
Mon Apr 02 15:11:34 2012 us=634000 local = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 local_port = 1194
Mon Apr 02 15:11:34 2012 us=634000 remote = '195.34.115.66'
Mon Apr 02 15:11:34 2012 us=634000 remote_port = 1194
Mon Apr 02 15:11:34 2012 us=634000 remote_float = ENABLED
Mon Apr 02 15:11:34 2012 us=634000 bind_defined = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 bind_local = ENABLED
Mon Apr 02 15:11:34 2012 us=634000 connect_retry_seconds = 5
Mon Apr 02 15:11:34 2012 us=634000 connect_timeout = 10
Mon Apr 02 15:11:34 2012 us=634000 connect_retry_max = 0
Mon Apr 02 15:11:34 2012 us=634000 socks_proxy_server = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 socks_proxy_port = 0
Mon Apr 02 15:11:34 2012 us=634000 socks_proxy_retry = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 Connection profiles END
Mon Apr 02 15:11:34 2012 us=634000 remote_random = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 ipchange = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 dev = 'tun0'
Mon Apr 02 15:11:34 2012 us=634000 dev_type = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 dev_node = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 lladdr = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 topology = 1
Mon Apr 02 15:11:34 2012 us=634000 tun_ipv6 = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 ifconfig_local = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 ifconfig_remote_netmask = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 ifconfig_noexec = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 ifconfig_nowarn = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 shaper = 0
Mon Apr 02 15:11:34 2012 us=634000 tun_mtu = 1500
Mon Apr 02 15:11:34 2012 us=634000 tun_mtu_defined = ENABLED
Mon Apr 02 15:11:34 2012 us=634000 link_mtu = 1500
Mon Apr 02 15:11:34 2012 us=634000 link_mtu_defined = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 tun_mtu_extra = 0
Mon Apr 02 15:11:34 2012 us=634000 tun_mtu_extra_defined = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 fragment = 0
Mon Apr 02 15:11:34 2012 us=634000 mtu_discover_type = -1
Mon Apr 02 15:11:34 2012 us=634000 mtu_test = 1
Mon Apr 02 15:11:34 2012 us=634000 mlock = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 keepalive_ping = 0
Mon Apr 02 15:11:34 2012 us=634000 keepalive_timeout = 0
Mon Apr 02 15:11:34 2012 us=634000 inactivity_timeout = 0
Mon Apr 02 15:11:34 2012 us=634000 ping_send_timeout = 0
Mon Apr 02 15:11:34 2012 us=634000 ping_rec_timeout = 0
Mon Apr 02 15:11:34 2012 us=634000 ping_rec_timeout_action = 0
Mon Apr 02 15:11:34 2012 us=634000 ping_timer_remote = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 remap_sigusr1 = 0
Mon Apr 02 15:11:34 2012 us=634000 explicit_exit_notification = 0
Mon Apr 02 15:11:34 2012 us=634000 persist_tun = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 persist_local_ip = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 persist_remote_ip = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 persist_key = DISABLED
Mon Apr 02 15:11:34 2012 us=634000 mssfix = 1450
Mon Apr 02 15:11:34 2012 us=634000 resolve_retry_seconds = 1000000000
Mon Apr 02 15:11:34 2012 us=634000 username = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 groupname = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 chroot_dir = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 cd_dir = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=634000 writepid = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=900000 up_script = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=900000 down_script = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=900000 down_pre = DISABLED
Mon Apr 02 15:11:34 2012 us=900000 up_restart = DISABLED
Mon Apr 02 15:11:34 2012 us=900000 up_delay = DISABLED
Mon Apr 02 15:11:34 2012 us=900000 daemon = DISABLED
Mon Apr 02 15:11:34 2012 us=900000 inetd = 0
Mon Apr 02 15:11:34 2012 us=900000 log = DISABLED
Mon Apr 02 15:11:34 2012 us=900000 suppress_timestamps = DISABLED
Mon Apr 02 15:11:34 2012 us=900000 nice = 0
Mon Apr 02 15:11:34 2012 us=900000 verbosity = 6
Mon Apr 02 15:11:34 2012 us=900000 mute = 0
Mon Apr 02 15:11:34 2012 us=900000 gremlin = 0
Mon Apr 02 15:11:34 2012 us=900000 status_file = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=900000 status_file_version = 1
Mon Apr 02 15:11:34 2012 us=900000 status_file_update_freq = 60
Mon Apr 02 15:11:34 2012 us=900000 occ = ENABLED
Mon Apr 02 15:11:34 2012 us=900000 rcvbuf = 0
Mon Apr 02 15:11:34 2012 us=900000 sndbuf = 0
Mon Apr 02 15:11:34 2012 us=946000 sockflags = 0
Mon Apr 02 15:11:34 2012 us=946000 fast_io = DISABLED
Mon Apr 02 15:11:34 2012 us=946000 lzo = 7
Mon Apr 02 15:11:34 2012 us=946000 route_script = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=946000 route_default_gateway = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=946000 route_default_metric = 0
Mon Apr 02 15:11:34 2012 us=946000 route_noexec = DISABLED
Mon Apr 02 15:11:34 2012 us=946000 route_delay = 2
Mon Apr 02 15:11:34 2012 us=946000 route_delay_window = 30
Mon Apr 02 15:11:34 2012 us=946000 route_delay_defined = ENABLED
Mon Apr 02 15:11:34 2012 us=946000 route_nopull = DISABLED
Mon Apr 02 15:11:34 2012 us=946000 route_gateway_via_dhcp = DISABLED
Mon Apr 02 15:11:34 2012 us=946000 max_routes = 100
Mon Apr 02 15:11:34 2012 us=946000 allow_pull_fqdn = DISABLED
Mon Apr 02 15:11:34 2012 us=946000 management_addr = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=946000 management_port = 0
Mon Apr 02 15:11:34 2012 us=962000 management_user_pass = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=962000 management_log_history_cache = 250
Mon Apr 02 15:11:34 2012 us=962000 management_echo_buffer_size = 100
Mon Apr 02 15:11:34 2012 us=962000 management_write_peer_info_file = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=962000 management_client_user = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=962000 management_client_group = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=962000 management_flags = 0
Mon Apr 02 15:11:34 2012 us=962000 shared_secret_file = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=962000 key_direction = 2
Mon Apr 02 15:11:34 2012 us=962000 ciphername_defined = ENABLED
Mon Apr 02 15:11:34 2012 us=962000 ciphername = 'BF-CBC'
Mon Apr 02 15:11:34 2012 us=962000 authname_defined = ENABLED
Mon Apr 02 15:11:34 2012 us=962000 authname = 'SHA1'
Mon Apr 02 15:11:34 2012 us=962000 prng_hash = 'SHA1'
Mon Apr 02 15:11:34 2012 us=962000 prng_nonce_secret_len = 16
Mon Apr 02 15:11:34 2012 us=962000 keysize = 0
Mon Apr 02 15:11:34 2012 us=993000 engine = DISABLED
Mon Apr 02 15:11:34 2012 us=993000 replay = ENABLED
Mon Apr 02 15:11:34 2012 us=993000 mute_replay_warnings = DISABLED
Mon Apr 02 15:11:34 2012 us=993000 replay_window = 64
Mon Apr 02 15:11:34 2012 us=993000 replay_time = 15
Mon Apr 02 15:11:34 2012 us=993000 packet_id_file = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=993000 use_iv = ENABLED
Mon Apr 02 15:11:34 2012 us=993000 test_crypto = DISABLED
Mon Apr 02 15:11:34 2012 us=993000 tls_server = DISABLED
Mon Apr 02 15:11:34 2012 us=993000 tls_client = ENABLED
Mon Apr 02 15:11:34 2012 us=993000 key_method = 2
Mon Apr 02 15:11:34 2012 us=993000 ca_file = 'C:\Program Files (x86)\OpenVPN\config\Marathon\ca.crt'
Mon Apr 02 15:11:34 2012 us=993000 ca_path = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=993000 dh_file = '[UNDEF]'
Mon Apr 02 15:11:34 2012 us=993000 cert_file = 'C:\Program Files (x86)\OpenVPN\config\Marathon\Stoyko.Nalbantov.crt'
Mon Apr 02 15:11:35 2012 us=9000 priv_key_file = 'C:\Program Files (x86)\OpenVPN\config\Marathon\Stoyko.Nalbantov.key'
Mon Apr 02 15:11:35 2012 us=9000 pkcs12_file = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 cryptoapi_cert = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 cipher_list = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 tls_verify = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 tls_export_cert = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 tls_remote = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 crl_file = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=9000 ns_cert_type = 64
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=9000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_ku[i] = 0
Mon Apr 02 15:11:35 2012 us=24000 remote_cert_eku = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=24000 tls_timeout = 2
Mon Apr 02 15:11:35 2012 us=24000 renegotiate_bytes = 0
Mon Apr 02 15:11:35 2012 us=24000 renegotiate_packets = 0
Mon Apr 02 15:11:35 2012 us=24000 renegotiate_seconds = 3600
Mon Apr 02 15:11:35 2012 us=24000 handshake_window = 60
Mon Apr 02 15:11:35 2012 us=24000 transition_window = 3600
Mon Apr 02 15:11:35 2012 us=24000 single_session = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 push_peer_info = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 tls_exit = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 tls_auth_file = 'C:\Program Files (x86)\OpenVPN\config\Marathon\ta.key'
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=40000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_protected_authentication = DISABLED
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=56000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_private_mode = 00000000
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=71000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_cert_private = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_pin_cache_period = -1
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_id = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=87000 pkcs11_id_management = DISABLED
Mon Apr 02 15:11:35 2012 us=87000 server_network = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=87000 server_netmask = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 server_bridge_ip = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 server_bridge_netmask = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 server_bridge_pool_start = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 server_bridge_pool_end = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 ifconfig_pool_defined = DISABLED
Mon Apr 02 15:11:35 2012 us=118000 ifconfig_pool_start = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 ifconfig_pool_end = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 ifconfig_pool_netmask = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=118000 ifconfig_pool_persist_refresh_freq = 600
Mon Apr 02 15:11:35 2012 us=118000 n_bcast_buf = 256
Mon Apr 02 15:11:35 2012 us=118000 tcp_queue_limit = 64
Mon Apr 02 15:11:35 2012 us=118000 real_hash_size = 256
Mon Apr 02 15:11:35 2012 us=118000 virtual_hash_size = 256
Mon Apr 02 15:11:35 2012 us=118000 client_connect_script = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=118000 learn_address_script = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=118000 client_disconnect_script = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=118000 client_config_dir = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=118000 ccd_exclusive = DISABLED
Mon Apr 02 15:11:35 2012 us=118000 tmp_dir = 'C:\Users\Stoyko\AppData\Local\Temp\'
Mon Apr 02 15:11:35 2012 us=118000 push_ifconfig_defined = DISABLED
Mon Apr 02 15:11:35 2012 us=118000 push_ifconfig_local = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 push_ifconfig_remote_netmask = 0.0.0.0
Mon Apr 02 15:11:35 2012 us=118000 enable_c2c = DISABLED
Mon Apr 02 15:11:35 2012 us=118000 duplicate_cn = DISABLED
Mon Apr 02 15:11:35 2012 us=118000 cf_max = 0
Mon Apr 02 15:11:35 2012 us=118000 cf_per = 0
Mon Apr 02 15:11:35 2012 us=118000 max_clients = 1024
Mon Apr 02 15:11:35 2012 us=118000 max_routes_per_client = 256
Mon Apr 02 15:11:35 2012 us=118000 auth_user_pass_verify_script = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=134000 auth_user_pass_verify_script_via_file = DISABLED
Mon Apr 02 15:11:35 2012 us=134000 ssl_flags = 0
Mon Apr 02 15:11:35 2012 us=134000 client = DISABLED
Mon Apr 02 15:11:35 2012 us=134000 pull = ENABLED
Mon Apr 02 15:11:35 2012 us=134000 auth_user_pass_file = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=134000 show_net_up = DISABLED
Mon Apr 02 15:11:35 2012 us=134000 route_method = 2
Mon Apr 02 15:11:35 2012 us=134000 ip_win32_defined = ENABLED
Mon Apr 02 15:11:35 2012 us=134000 ip_win32_type = 0
Mon Apr 02 15:11:35 2012 us=134000 dhcp_masq_offset = 0
Mon Apr 02 15:11:35 2012 us=134000 dhcp_lease_time = 31536000
Mon Apr 02 15:11:35 2012 us=134000 tap_sleep = 0
Mon Apr 02 15:11:35 2012 us=134000 dhcp_options = DISABLED
Mon Apr 02 15:11:35 2012 us=134000 dhcp_renew = DISABLED
Mon Apr 02 15:11:35 2012 us=134000 dhcp_pre_release = DISABLED
Mon Apr 02 15:11:35 2012 us=134000 dhcp_release = DISABLED
Mon Apr 02 15:11:35 2012 us=149000 domain = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=149000 netbios_scope = '[UNDEF]'
Mon Apr 02 15:11:35 2012 us=149000 netbios_node_type = 0
Mon Apr 02 15:11:35 2012 us=149000 disable_nbt = DISABLED
Mon Apr 02 15:11:35 2012 us=149000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Mon Apr 02 15:11:35 2012 us=149000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Apr 02 15:11:38 2012 us=394000 Control Channel Authentication: using 'C:\Program Files (x86)\OpenVPN\config\Marathon\ta.key' as a OpenVPN static key file
Mon Apr 02 15:11:38 2012 us=394000 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 02 15:11:38 2012 us=394000 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 02 15:11:38 2012 us=394000 LZO compression initialized
Mon Apr 02 15:11:38 2012 us=394000 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Apr 02 15:11:38 2012 us=394000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Apr 02 15:11:38 2012 us=394000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Apr 02 15:11:38 2012 us=394000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Apr 02 15:11:38 2012 us=394000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Apr 02 15:11:38 2012 us=394000 Local Options hash (VER=V4): '504e774e'
Mon Apr 02 15:11:38 2012 us=394000 Expected Remote Options hash (VER=V4): '14168603'
Mon Apr 02 15:11:38 2012 us=394000 UDPv4 link local (bound): [undef]:1194
Mon Apr 02 15:11:38 2012 us=394000 UDPv4 link remote: 195.34.115.66:1194
Mon Apr 02 15:11:38 2012 us=394000 UDPv4 WRITE [42] to 195.34.115.66:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Mon Apr 02 15:11:38 2012 us=862000 UDPv4 READ [54] from 195.34.115.66:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Mon Apr 02 15:11:38 2012 us=862000 TLS: Initial packet from 195.34.115.66:1194, sid=e2656aea c3e4cc76
Mon Apr 02 15:11:38 2012 us=862000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Mon Apr 02 15:11:38 2012 us=862000 UDPv4 WRITE [142] to 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=100
Mon Apr 02 15:11:38 2012 us=862000 UDPv4 WRITE [142] to 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=2 DATA len=100
Mon Apr 02 15:11:38 2012 us=862000 UDPv4 WRITE [52] to 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=3 DATA len=10
Mon Apr 02 15:11:39 2012 us=517000 UDPv4 READ [50] from 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 1 ]
Mon Apr 02 15:11:39 2012 us=517000 UDPv4 READ [50] from 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #3 ] [ 2 ]
Mon Apr 02 15:11:39 2012 us=533000 UDPv4 READ [154] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ 3 ] pid=1 DATA len=100
[...]
Mon Apr 02 15:11:41 2012 us=483000 UDPv4 READ [142] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #26 ] [ ] pid=23 DATA len=100
Mon Apr 02 15:11:41 2012 us=498000 VERIFY OK: depth=1, /C=BG/ST=Bulgaria/L=Sofia/O=HP/OU=Marathon-Global_Bulgaria/CN=MarathonCA/name=MarathonCA/emailAddress=nadia.ropleva@marathon-global.com
Mon Apr 02 15:11:41 2012 us=498000 VERIFY OK: nsCertType=SERVER
Mon Apr 02 15:11:41 2012 us=498000 VERIFY OK: depth=0, /C=BG/ST=Bulgaria/L=Sofia/O=HP/OU=Marathon-Global_Bulgaria/CN=MarathonServer/name=MarathonServer/emailAddress=nadia.ropleva@marathon-global.com
Mon Apr 02 15:11:41 2012 us=498000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #28 ] [ 23 ]
Mon Apr 02 15:11:41 2012 us=498000 UDPv4 READ [142] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #27 ] [ ] pid=24 DATA len=100
Mon Apr 02 15:11:41 2012 us=498000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #29 ] [ 24 ]
[...]
Mon Apr 02 15:11:46 2012 us=880000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #79 ] [ 46 ]
Mon Apr 02 15:11:46 2012 us=880000 UDPv4 READ [124] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #78 ] [ ] pid=47 DATA len=82
Mon Apr 02 15:11:46 2012 us=880000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 02 15:11:46 2012 us=880000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 02 15:11:46 2012 us=880000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 02 15:11:46 2012 us=880000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 02 15:11:46 2012 us=880000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #80 ] [ 47 ]
Mon Apr 02 15:11:46 2012 us=880000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Apr 02 15:11:46 2012 us=880000 [MarathonServer] Peer Connection Initiated with 195.34.115.66:1194
Mon Apr 02 15:11:47 2012 us=988000 NOTE: Beginning empirical MTU test -- results should be available in 3 to 4 minutes.
Mon Apr 02 15:11:47 2012 us=988000 UDPv4 WRITE [61] to 195.34.115.66:1194: P_DATA_V1 kid=0 DATA len=60
Mon Apr 02 15:11:48 2012 us=472000 UDPv4 READ [541] from 195.34.115.66:1194: P_DATA_V1 kid=0 DATA len=540
Mon Apr 02 15:11:48 2012 us=472000 SENT CONTROL [MarathonServer]: 'PUSH_REQUEST' (status=1)
Mon Apr 02 15:11:48 2012 us=472000 UDPv4 WRITE [132] to 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #81 ] [ ] pid=34 DATA len=90
Mon Apr 02 15:11:49 2012 us=80000 UDPv4 READ [50] from 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #79 ] [ 34 ]
Mon Apr 02 15:11:49 2012 us=80000 UDPv4 READ [142] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #80 ] [ ] pid=48 DATA len=100
Mon Apr 02 15:11:49 2012 us=80000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #82 ] [ 48 ]
Mon Apr 02 15:11:49 2012 us=80000 UDPv4 READ [142] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #81 ] [ ] pid=49 DATA len=100
Mon Apr 02 15:11:49 2012 us=80000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #83 ] [ 49 ]
Mon Apr 02 15:11:49 2012 us=80000 UDPv4 READ [92] from 195.34.115.66:1194: P_CONTROL_V1 kid=0 pid=[ #82 ] [ ] pid=50 DATA len=50
Mon Apr 02 15:11:49 2012 us=80000 PUSH: Received control message: 'PUSH_REPLY,route 172.18.1.0 255.255.255.0,route 172.24.1.0 255.255.255.0,route 10.8.0.0 255.255.240.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.246 10.8.0.245'
Mon Apr 02 15:11:49 2012 us=80000 OPTIONS IMPORT: timers and/or timeouts modified
Mon Apr 02 15:11:49 2012 us=80000 OPTIONS IMPORT: --ifconfig/up options modified
Mon Apr 02 15:11:49 2012 us=80000 OPTIONS IMPORT: route options modified
Mon Apr 02 15:11:49 2012 us=80000 ROUTE default_gateway=192.168.1.1
Mon Apr 02 15:11:49 2012 us=96000 ******** NOTE: Please manually set the IP/netmask of 'ADRA_VPN' to 10.8.0.246/255.255.255.252 (if it is not already set)
Mon Apr 02 15:11:49 2012 us=96000 TAP-WIN32 device [ADRA_VPN] opened: \\.\Global\{8DE68E7D-AA3A-4184-BCE6-E7687B509E74}.tap
Mon Apr 02 15:11:49 2012 us=111000 TAP-Win32 Driver Version 9.9
Mon Apr 02 15:11:49 2012 us=111000 TAP-Win32 MTU=1500
Mon Apr 02 15:11:49 2012 us=111000 Successful ARP Flush on interface [24] {8DE68E7D-AA3A-4184-BCE6-E7687B509E74}
Mon Apr 02 15:11:49 2012 us=111000 UDPv4 WRITE [50] to 195.34.115.66:1194: P_ACK_V1 kid=0 pid=[ #84 ] [ 50 ]
Mon Apr 02 15:11:50 2012 us=297000 UDPv4 WRITE [541] to 195.34.115.66:1194: P_DATA_V1 kid=0 DATA len=540
Mon Apr 02 15:11:51 2012 us=467000 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Mon Apr 02 15:11:51 2012 us=467000 C:\WINDOWS\system32\route.exe ADD 172.18.1.0 MASK 255.255.255.0 10.8.0.245
OK!
Mon Apr 02 15:11:51 2012 us=607000 C:\WINDOWS\system32\route.exe ADD 172.24.1.0 MASK 255.255.255.0 10.8.0.245
OK!
Mon Apr 02 15:11:51 2012 us=654000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.240.0 10.8.0.245
OK!
Mon Apr 02 15:11:51 2012 us=670000 Initialization Sequence Completed
Mon Apr 02 15:11:53 2012 us=994000 UDPv4 WRITE [61] to 195.34.115.66:1194: P_DATA_V1 kid=0 DATA len=60
Mon Apr 02 15:11:54 2012 us=415000 UDPv4 READ [541] from 195.34.115.66:1194: P_DATA_V1 kid=0 DATA len=540
Mon Apr 02 15:11:56 2012 us=740000 UDPv4 WRITE [541] to 195.34.115.66:1194: P_DATA_V1 kid=0 DATA len=540
[...]
Here is what happens - routing table just refuses to include this route:
C:\Windows\system32>route print
===========================================================================
Interface List
16...00 05 9a 3c 7a 00 ......Cisco AnyConnect VPN Virtual Miniport Adapter for
Windows x64
24...00 ff 8d e6 8e 7d ......TAP-Win32 Adapter V9
19...e0 2a 82 a7 17 9c ......Broadcom 4313 802.11b/g/n
20...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
21...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
1...........................Software Loopback Interface 1
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
22...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
17...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 30
10.8.0.244 255.255.255.252 On-link 10.8.0.246 286
10.8.0.246 255.255.255.255 On-link 10.8.0.246 286
10.8.0.247 255.255.255.255 On-link 10.8.0.246 286
15.203.169.227 255.255.255.255 192.168.1.1 192.168.1.100 31
16.0.0.0 255.0.0.0 On-link 134.44.129.215 2
16.255.255.255 255.255.255.255 On-link 134.44.129.215 257
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
134.44.129.0 255.255.255.0 On-link 134.44.129.215 257
134.44.129.215 255.255.255.255 On-link 134.44.129.215 257
134.44.129.255 255.255.255.255 On-link 134.44.129.215 257
192.168.1.0 255.255.255.0 On-link 192.168.1.100 286
192.168.1.1 255.255.255.255 192.168.1.1 192.168.1.100 31
192.168.1.100 255.255.255.255 On-link 192.168.1.100 286
192.168.1.255 255.255.255.255 On-link 192.168.1.100 286
192.168.9.0 255.255.255.0 On-link 192.168.9.1 276
192.168.9.1 255.255.255.255 On-link 192.168.9.1 276
192.168.9.255 255.255.255.255 On-link 192.168.9.1 276
192.168.67.0 255.255.255.0 On-link 192.168.67.1 276
192.168.67.1 255.255.255.255 On-link 192.168.67.1 276
192.168.67.255 255.255.255.255 On-link 192.168.67.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.100 286
224.0.0.0 240.0.0.0 On-link 192.168.67.1 276
224.0.0.0 240.0.0.0 On-link 192.168.9.1 276
224.0.0.0 240.0.0.0 On-link 134.44.129.215 257
224.0.0.0 240.0.0.0 On-link .210.8.046 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.100 286
255.255.255.255 255.255.255.255 On-link 192.168.67.1 276
255.255.255.255 255.255.255.255 On-link 192.168.9.1 276
255.255.255.255 255.255.255.255 On-link 134.44.129.215 257
255.255.255.255 255.255.255.255 On-link 10.8.0.246 286
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
172.18.1.0 255.255.255.0 10.8.0.245 1
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
17 1110 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
15 58 2001::/32 On-link
15 306 2001:0:5ef5:79fd:459:613e:d1c8:4331/128
On-link
17 1010 2002::/16 On-link
17 266 2002:862c:81d7::862c:81d7/128
On-link
19 286 fe80::/64 On-link
21 276 fe80::/64 On-link
20 276 fe80::/64 On-link
16 266 fe80::/64 On-link
15 306 fe80::/64 On-link
15 306 fe80::459:613e:d1c8:4331/128
On-link
16 266 fe80::544f:ee37:5d2:bcd7/128
On-link
21 276 fe80::807f:ad3c:7b34:7ca3/128
On-link
20 276 fe80::e411:d2b:4d61:3eec/128
On-link
19 286 fe80::f412:f35b:4231:be32/128
On-link
1 306 ff00::/8 On-link
15 306 ff00::/8 On-link
19 286 ff00::/8 On-link
21 276 ff00::/8 On-link
20 276 ff00::/8 On-link
16 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Windows\system32>C:\WINDOWS\system32\route.exe ADD 172.18.1.0 MASK 255.255.25
5.0 10.8.0.245 -p
The route addition failed: The object already exists.
C:\Windows\system32>ping 172.18.1.1
Pinging 172.18.1.1 with 32 bytes of data:
Request timed out.
^C
C:\Windows\system32>
C:\Windows\system32>C:\WINDOWS\system32\route.exe ADD 172.18.1.0 MASK 255.255.25
5.0 10.8.0.245
OK!
C:\Windows\system32>C:\WINDOWS\system32\route.exe ADD 172.18.1.0 MASK 255.255.25
5.0 10.8.0.245
OK!
C:\Windows\system32>ping 172.18.1.1
Pinging 172.18.1.1 with 32 bytes of data:
Request timed out.
^C
C:\Windows\system32>route print
===========================================================================
Interface List
16...00 05 9a 3c 7a 00 ......Cisco AnyConnect VPN Virtual Miniport Adapter for
Windows x64
24...00 ff 8d e6 8e 7d ......TAP-Win32 Adapter V9
19...e0 2a 82 a7 17 9c ......Broadcom 4313 802.11b/g/n
20...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
21...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
1...........................Software Loopback Interface 1
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
22...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
17...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 30
10.8.0.244 255.255.255.252 On-link 10.8.0.246 286
10.8.0.246 255.255.255.255 On-link 10.8.0.246 286
10.8.0.247 255.255.255.255 On-link 10.8.0.246 286
15.203.169.227 255.255.255.255 192.168.1.1 192.168.1.100 31
16.0.0.0 255.0.0.0 On-link 134.44.129.215 2
16.255.255.255 255.255.255.255 On-link 134.44.129.215 257
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
134.44.129.0 255.255.255.0 On-link 134.44.129.215 257
134.44.129.215 255.255.255.255 On-link 134.44.129.215 257
134.44.129.255 255.255.255.255 On-link 134.44.129.215 257
192.168.1.0 255.255.255.0 On-link 192.168.1.100 286
192.168.1.1 255.255.255.255 192.168.1.1 192.168.1.100 31
192.168.1.100 255.255.255.255 On-link 192.168.1.100 286
192.168.1.255 255.255.255.255 On-link 192.168.1.100 286
192.168.9.0 255.255.255.0 On-link 192.168.9.1 276
192.168.9.1 255.255.255.255 On-link 192.168.9.1 276
192.168.9.255 255.255.255.255 On-link 192.168.9.1 276
192.168.67.0 255.255.255.0 On-link 192.168.67.1 276
192.168.67.1 255.255.255.255 On-link 192.168.67.1 276
192.168.67.255 255.255.255.255 On-link 192.168.67.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.100 286
224.0.0.0 240.0.0.0 On-link 192.168.67.1 276
224.0.0.0 240.0.0.0 On-link 192.168.9.1 276
224.0.0.0 240.0.0.0 On-link 134.44.129.215 257
224.0.0.0 240.0.0.0 On-link 10.8.0.246 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.100 286
255.255.255.255 255.255.255.255 On-link 192.168.67.1 276
255.255.255.255 255.255.255.255 On-link 192.168.9.1 276
255.255.255.255 255.255.255.255 On-link 134.44.129.215 257
255.255.255.255 255.255.255.255 On-link 10.8.0.246 286
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
172.18.1.0 255.255.255.0 10.8.0.245 1
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
17 1110 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
15 58 2001::/32 On-link
15 306 2001:0:5ef5:79fb:2832:5ea2:d1c8:4331/128
On-link
17 1010 2002::/16 On-link
17 266 2002:862c:81d7::862c:81d7/128
On-link
19 286 fe80::/64 On-link
21 276 fe80::/64 On-link
20 276 fe80::/64 On-link
16 266 fe80::/64 On-link
15 306 fe80::/64 On-link
15 306 fe80::2832:5ea2:d1c8:4331/128
On-link
16 266 fe80::544f:ee37:5d2:bcd7/128
On-link
21 276 fe80::807f:ad3c:7b34:7ca3/128
On-link
20 276 fe80::e411:d2b:4d61:3eec/128
On-link
19 286 fe80::f412:f35b:4231:be32/128
On-link
1 306 ff00::/8 On-link
15 306 ff00::/8 On-link
19 286 ff00::/8 On-link
21 276 ff00::/8 On-link
20 276 ff00::/8 On-link
16 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Windows\system32>
And here is the client conf file:
port 1194
proto udp
dev tun
ip-win32 manual
remote 195.34.115.66
float
ns-cert-type server
route-method exe
route-delay 2
tls-client
ca "C:\\Program Files (x86)\\OpenVPN\\config\\Marathon\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\Marathon\\Stoyko.Nalbantov.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\Marathon\\Stoyko.Nalbantov.key"
tls-auth "C:\\Program Files (x86)\\OpenVPN\\config\\Marathon\\ta.key" 1
auth-nocache
mtu-test
tun-mtu 1500
mssfix 1450
pull
cipher BF-CBC
comp-lzo
verb 6
..and the server conf file (again - no DHCP, each client is given a static IP during cert creation):
port 1194
proto udp
dev tun0
ca /etc/openvpn/road-warriors/keys/ca.crt
cert /etc/openvpn/road-warriors/keys/MarathonServer.crt
key /etc/openvpn/road-warriors/keys/MarathonServer.key
dh /etc/openvpn/road-warriors/keys/dh1024.pem
server 10.8.0.0 255.255.240.0
ifconfig-pool-persist /etc/openvpn/road-warriors/ipp.txt
client-to-client
push "route 172.18.1.0 255.255.255.0"
push "route 172.24.1.0 255.255.255.0"
client-config-dir /etc/openvpn/road-warriors/ccd
keepalive 10 120
crl-verify /etc/openvpn/road-warriors/keys/crl.pem
tls-server
tls-auth /etc/openvpn/road-warriors/keys/ta.key 0
cipher BF-CBC # Blowfish (default)
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status /etc/openvpn/road-warriors/openvpn-status.log
log /etc/openvpn/road-warriors/openvpn.log
verb 5
mute 10
I have just ended a 1-hour remote session trying to make a client's VPN to work. Stopped all anti-virus, firewall, etc. Removed all UAC, disabled all interfaces except the physical and the TAP32, but to no avail. Then rebooted the machine, and again - no route was added. The client informed me 15 minutes ago that his VPN miraculously started running... really annoying and inconsistent issue. Please help me if you have any ideas... thank you in advance!
Thank you!!!
Simeon
