OpenVPN not being nice on windows 7 64 bits :(

ogomez

Hi, all.
I recently got a new vpn on my linux server, because I want to tunnel my connections from university to this server. The wireless network at uni is very unsecure and open, so I'd like a bit of encryption.

First, I set up openVPN guide found in the linode library at:
http://library.linode.com/networking/openvpn/ubuntu-10.04-lucid

It all seems to work fine, however OpenVPN 2.2.2 is not playing nicely with windows 7. I installed it, and the tap driver seems to install fine. I have set up some variables that I found might help with the setup, but it's a no go. It seems to have some routing issues. Here's the log and hopefully you can help because I'm really lost.
Thu Apr 12 19:17:30 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Apr 12 19:17:30 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Apr 12 19:17:30 2012 LZO compression initialized
Thu Apr 12 19:17:30 2012 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Apr 12 19:17:30 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 12 19:17:30 2012 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Apr 12 19:17:30 2012 Local Options hash (VER=V4): '69109d17'
Thu Apr 12 19:17:30 2012 Expected Remote Options hash (VER=V4): 'c0103fa8'
Thu Apr 12 19:17:30 2012 Attempting to establish TCP connection with x.x.x.x:xxxx
Thu Apr 12 19:17:30 2012 TCP connection established with 176.58.99.180:8080
Thu Apr 12 19:17:30 2012 TCPv4_CLIENT link local: [undef]
Thu Apr 12 19:17:30 2012 TCPv4_CLIENT link remote: 176.58.99.180:8080
Thu Apr 12 19:17:30 2012 TLS: Initial packet from 176.58.99.180:8080, sid=2c769082 628d1aea
Thu Apr 12 19:17:31 2012 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=ogomez.s92@gmail.com
Thu Apr 12 19:17:31 2012 VERIFY OK: nsCertType=SERVER
Thu Apr 12 19:17:31 2012 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=ogomez.s92@gmail.com
Thu Apr 12 19:17:33 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 12 19:17:33 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 12 19:17:33 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 12 19:17:33 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 12 19:17:33 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Apr 12 19:17:33 2012 [server] Peer Connection Initiated with 176.58.99.180:8080
Thu Apr 12 19:17:35 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Apr 12 19:17:35 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Apr 12 19:17:35 2012 OPTIONS IMPORT: timers and/or timeouts modified
Thu Apr 12 19:17:35 2012 OPTIONS IMPORT: --ifconfig/up options modified
Thu Apr 12 19:17:35 2012 OPTIONS IMPORT: route options modified
Thu Apr 12 19:17:35 2012 ROUTE default_gateway=10.109.220.1
Thu Apr 12 19:17:35 2012 TAP-WIN32 device [tap] opened: \\.\Global\{65108B41-5468-452F-ADD3-FD6BF08D4834}.tap
Thu Apr 12 19:17:35 2012 TAP-Win32 Driver Version 9.9
Thu Apr 12 19:17:35 2012 TAP-Win32 MTU=1500
Thu Apr 12 19:17:35 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {65108B41-5468-452F-ADD3-FD6BF08D4834} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Apr 12 19:17:35 2012 NOTE: FlushIpNetTable failed on interface [40] {65108B41-5468-452F-ADD3-FD6BF08D4834} (status=1168) : Element not found.
Thu Apr 12 19:17:41 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:41 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:45 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:45 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:46 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:46 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:47 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:47 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:48 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:48 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:49 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:49 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:50 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:50 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:51 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:51 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:53 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:53 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:54 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:54 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:55 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:55 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:57 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:57 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:58 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:58 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:17:59 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:59 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:00 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:00 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:02 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:02 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:03 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:03 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:04 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:04 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:05 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:05 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:06 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:06 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:07 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:07 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:08 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:08 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:09 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:09 2012 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 12 19:18:11 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 176.58.99.180 MASK 255.255.255.255 10.109.220.1
OK!
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 10.109.220.1 p=0 i=12 t=4 pr=3 a=9686 h=0 m=30/0/0/0/0
0.0.0.0 128.0.0.0 10.8.0.5 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
10.8.0.1 255.255.255.255 10.8.0.5 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
10.109.220.0 255.255.254.0 10.109.221.18 p=0 i=12 t=3 pr=3 a=9686 h=0 m=286/0/0/0/0
10.109.221.18 255.255.255.255 10.109.221.18 p=0 i=12 t=3 pr=3 a=9686 h=0 m=286/0/0/0/0
10.109.221.255 255.255.255.255 10.109.221.18 p=0 i=12 t=3 pr=3 a=9686 h=0 m=286/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
128.0.0.0 128.0.0.0 10.8.0.5 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
176.58.99.180 255.255.255.255 10.109.220.1 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 10.109.221.18 p=0 i=12 t=3 pr=3 a=9760 h=0 m=286/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 10.109.221.18 p=0 i=12 t=3 pr=3 a=9760 h=0 m=286/0/0/0/0
SYSTEM ADAPTER LIST
Bluetooth Device (Personal Area Network)
Index = 14
GUID = {5D7931E0-8A4A-4E41-B695-0C37A86B3934}
IP = 0.0.0.0/0.0.0.0
MAC = c8:bc:c8:e3:a1:9a
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV =
DHCP LEASE OBTAINED = Thu Apr 12 19:18:11 2012
DHCP LEASE EXPIRES = Sun Mar 29 09:14:52 1970
DNS SERV =
Broadcom 802.11n Network Adapter
Index = 12
GUID = {64CCD90D-ADAD-491A-A32B-F5BFB9CE4F92}
IP = 10.109.221.18/255.255.254.0
MAC = c8:bc:c8:e3:ae:37
GATEWAY = 10.109.220.1/255.255.255.255
DHCP SERV = 10.109.220.1/255.255.255.255
DHCP LEASE OBTAINED = Thu Apr 12 19:06:45 2012
DHCP LEASE EXPIRES = Thu Jan 01 01:00:00 1970
PRI WINS = 158.109.173.31/255.255.255.255
SEC WINS =
DNS SERV = 158.109.0.1/255.255.255.255 158.109.0.9/255.255.255.255
Broadcom NetXtreme Gigabit Ethernet
Index = 10
GUID = {AA73BB4A-72ED-4F69-A681-54E1DBD8F4CE}
IP = 0.0.0.0/0.0.0.0
MAC = c8:bc:c8:a0:63:64
GATEWAY = 0.0.0.0/255.255.255.255
DNS SERV =
Thu Apr 12 19:18:11 2012 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )

ogomez

Hi, al.
I have been trying to set up a vpn for a few days now, but I've been having some issues. I configured my linux server using the debian guide found on the linode library, but windows 7 64 bits with openvpn 2.2.2 seems to be acting up and giving me some route issues. I have configured the route-delay, but it still acts up. Here's the log and hoepfully you can help, because this is a bit frustrating and I don't know what else to do.

Thu Apr 12 19:17:30 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Apr 12 19:17:30 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Apr 12 19:17:30 2012 LZO compression initialized
Thu Apr 12 19:17:30 2012 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Apr 12 19:17:30 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Apr 12 19:17:30 2012 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Apr 12 19:17:30 2012 Local Options hash (VER=V4): '69109d17'
Thu Apr 12 19:17:30 2012 Expected Remote Options hash (VER=V4): 'c0103fa8'
Thu Apr 12 19:17:30 2012 Attempting to establish TCP connection with x.x.x.x:xxxx
Thu Apr 12 19:17:30 2012 TCP connection established with 176.58.99.180:8080
Thu Apr 12 19:17:30 2012 TCPv4_CLIENT link local: [undef]
Thu Apr 12 19:17:30 2012 TCPv4_CLIENT link remote: 176.58.99.180:8080
Thu Apr 12 19:17:30 2012 TLS: Initial packet from 176.58.99.180:8080, sid=2c769082 628d1aea
Thu Apr 12 19:17:31 2012 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=ogomez.s92@gmail.com
Thu Apr 12 19:17:31 2012 VERIFY OK: nsCertType=SERVER
Thu Apr 12 19:17:31 2012 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=ogomez.s92@gmail.com
Thu Apr 12 19:17:33 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 12 19:17:33 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 12 19:17:33 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 12 19:17:33 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 12 19:17:33 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Apr 12 19:17:33 2012 [server] Peer Connection Initiated with 176.58.99.180:8080
Thu Apr 12 19:17:35 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Apr 12 19:17:35 2012 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Apr 12 19:17:35 2012 OPTIONS IMPORT: timers and/or timeouts modified
Thu Apr 12 19:17:35 2012 OPTIONS IMPORT: --ifconfig/up options modified
Thu Apr 12 19:17:35 2012 OPTIONS IMPORT: route options modified
Thu Apr 12 19:17:35 2012 ROUTE default_gateway=10.109.220.1
Thu Apr 12 19:17:35 2012 TAP-WIN32 device [tap] opened: \\.\Global\{65108B41-5468-452F-ADD3-FD6BF08D4834}.tap
Thu Apr 12 19:17:35 2012 TAP-Win32 Driver Version 9.9
Thu Apr 12 19:17:35 2012 TAP-Win32 MTU=1500
Thu Apr 12 19:17:35 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {65108B41-5468-452F-ADD3-FD6BF08D4834} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Apr 12 19:17:35 2012 NOTE: FlushIpNetTable failed on interface [40] {65108B41-5468-452F-ADD3-FD6BF08D4834} (status=1168) : Element not found.
Thu Apr 12 19:17:41 2012 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
Thu Apr 12 19:17:41 2012 Route: Waiting for TUN/TAP interface to come up...
This happens like 20 times then
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 176.58.99.180 MASK 255.255.255.255 10.109.220.1
OK!
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Thu Apr 12 19:18:11 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 10.109.220.1 p=0 i=12 t=4 pr=3 a=9686 h=0 m=30/0/0/0/0
0.0.0.0 128.0.0.0 10.8.0.5 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
10.8.0.1 255.255.255.255 10.8.0.5 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
10.109.220.0 255.255.254.0 10.109.221.18 p=0 i=12 t=3 pr=3 a=9686 h=0 m=286/0/0/0/0
10.109.221.18 255.255.255.255 10.109.221.18 p=0 i=12 t=3 pr=3 a=9686 h=0 m=286/0/0/0/0
10.109.221.255 255.255.255.255 10.109.221.18 p=0 i=12 t=3 pr=3 a=9686 h=0 m=286/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
128.0.0.0 128.0.0.0 10.8.0.5 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
176.58.99.180 255.255.255.255 10.109.220.1 p=0 i=12 t=4 pr=3 a=0 h=0 m=31/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 10.109.221.18 p=0 i=12 t=3 pr=3 a=9760 h=0 m=286/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=9798 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 10.109.221.18 p=0 i=12 t=3 pr=3 a=9760 h=0 m=286/0/0/0/0

janjust

the client log looks quite normal - you're using 'route-method exe' and the routes are added as they should be...

what is not working after the connection comes up?

Mimiko

Try adding to client config:

route-delay 60 60