Specs and config files:
Server on gentoo linux
port 11194
proto tcp
dev tun
ca privnet/ca.crt
cert privnet/server.crt
key privnet/server.key
dh privnet/dh1024.pem
server 10.8.0.0 255.255.254.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append /var/log/ovpn_log/openvpn.log
verb 3
txqueuelen 1000
Client on windows 7 x64
client
dev tun
proto tcp
# change this to your servers ip or hostname
remote somehost.com 11194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
comp-lzo
verb 3
script-security 2
route-up drive.bat
Client's log
Sun Jun 03 00:23:52 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sun Jun 03 00:23:52 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Jun 03 00:23:52 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Jun 03 00:23:52 2012 LZO compression initialized
Sun Jun 03 00:23:52 2012 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Jun 03 00:23:52 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Jun 03 00:23:52 2012 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Jun 03 00:23:52 2012 Local Options hash (VER=V4): '69109d17'
Sun Jun 03 00:23:52 2012 Expected Remote Options hash (VER=V4): 'c0103fa8'
Sun Jun 03 00:23:52 2012 Attempting to establish TCP connection with 192.168.1.200:11194
Sun Jun 03 00:23:52 2012 TCP connection established with 192.168.1.200:11194
Sun Jun 03 00:23:52 2012 TCPv4_CLIENT link local: [undef]
Sun Jun 03 00:23:52 2012 TCPv4_CLIENT link remote: 192.168.1.200:11194
Sun Jun 03 00:23:52 2012 TLS: Initial packet from 192.168.1.200:11194, sid=b4d49c36 e38aa209
Sun Jun 03 00:23:52 2012 VERIFY OK: depth=1,
Sun Jun 03 00:23:52 2012 VERIFY OK: depth=0,
Sun Jun 03 00:23:53 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jun 03 00:23:53 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jun 03 00:23:53 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jun 03 00:23:53 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jun 03 00:23:53 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Jun 03 00:23:53 2012 [server] Peer Connection Initiated with 192.168.1.200:11194
Sun Jun 03 00:23:55 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Jun 03 00:23:55 2012 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sun Jun 03 00:23:55 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jun 03 00:23:55 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jun 03 00:23:55 2012 OPTIONS IMPORT: route options modified
Sun Jun 03 00:23:55 2012 ROUTE default_gateway=192.168.1.1
Sun Jun 03 00:23:55 2012 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{70D9111F-608A-42B8-A355-4D1846F8C1F5}.tap
Sun Jun 03 00:23:55 2012 TAP-Win32 Driver Version 9.9
Sun Jun 03 00:23:55 2012 TAP-Win32 MTU=1500
Sun Jun 03 00:23:55 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {70D9111F-608A-42B8-A355-4D1846F8C1F5} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sun Jun 03 00:23:55 2012 Successful ARP Flush on interface [16] {70D9111F-608A-42B8-A355-4D1846F8C1F5}
Sun Jun 03 00:24:00 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sun Jun 03 00:24:00 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sun Jun 03 00:24:00 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sun Jun 03 00:24:00 2012 Route addition via IPAPI succeeded [adaptive]
C:\Program Files (x86)\OpenVPN\config>cd C:\Windows\system32
C:\Windows\System32>ping -n 1 10.8.0.1
Pinging 10.8.0.1 with 32 bytes of data:
Request timed out.
Ping statistics for 10.8.0.1:
Packets: Sent = 1, Received = 0, Lost = 1 (100% loss),
C:\Windows\System32>net use z: /persistent:no \\10.8.0.1\www /u:common nopass
System error 53 has occurred.
The network path was not found.
Sun Jun 03 00:25:05 2012 WARNING: Failed running command (--route-up): returned error code 2
Sun Jun 03 00:25:05 2012 Initialization Sequence Completed
Now the question is: why it is not working?
