Perseus
Hello,
I get exasperated of my Win7, it drives me crazy. But let me tell from the beginning:
I'm running an openVPN server, bridged TAP device listening TCP connections. Clients connecting to the server receive their routes via push, they will then route all traffic trough the tunnel. The openVPN server acts as DNS and DHCP. DHCP Lease is given for 24hours.
I connect to the server with my Win7 Prof (openVPN 2.2 running as admin), routes are added correctly, all works fine, tunneling active, all data through the tunnel. Then suddenly, not figured out the time yet - something between 10 and 15min I think, windows is ignoring all the routes that were set by openVPN and tries to connect via normal network, despite the fact that openVPN connection is still active. A route print still even shows the correct routes into the tunnel. To get rid of this issue I need to reconnect openVPN, which is totally annoying since all programs already have lost their respective server connections that have to be initiated again after the tunnel is renewed. So I have multiple minute lasting breaks in my workflow in just one hour.
Any suggestions to solve this problem?
Perseus
I didn't find anything that obviously affects routing. My local connection is simlpy wired, no WLAN or other mobile networks. The configs are as follows, I exchanged sensitive information with italic descriptions.
client:
remote adress port
proto tcp-client
dev tap
dev-node "LAN-Verbindung 2"
tls-client
persist-key
persist-tun
ns-cert-type server
ca "ca.crt"
cert "client01.crt"
key "client01.key"
tls-auth "static.key" 1
auth SHA1
cipher AES-256-CBC
mssfix
comp-lzo
nobind
verb 5
pull
route-method exe
route-delay 2
keepalive 10 60
server:
proto tcp-server
dev tap0
ca abc.crt
cert def.crt
key abc.key
dh abc.pem
tls-server
tls-auth def.key 0
port port
push "dhcp-option DNS 192.168.178.1"
push "redirect-gateway"
mode server
ifconfig-pool 192.168.178.101 192.168.178.120
push "route 192.168.178.0 255.255.255.0"
ifconfig 192.168.178.1 255.255.255.0
client-config-dir /var/tmp/clients_openvpn
topology subnet
push "topology subnet"
max-clients 2
push "route 192.168.178.0 255.255.255.0 192.168.178.1"
client-to-client
ifconfig 192.168.178.1 255.255.255.0
push "route-gateway 192.168.178.1"
push "route 192.168.178.0 255.255.255.0"
max-clients 2
client-to-client
tun-mtu 1500
mssfix
verb 3
daemon
cipher AES-256-CBC
comp-lzo
keepalive 10 120
verb5, client:
Tue Oct 16 20:49:41 2012 us=843000 Current Parameter Settings:
Tue Oct 16 20:49:41 2012 us=843000 config = 'openvpn.ovpn'
Tue Oct 16 20:49:41 2012 us=843000 mode = 0
Tue Oct 16 20:49:41 2012 us=843000 show_ciphers = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 show_digests = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 show_engines = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 genkey = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 key_pass_file = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 show_tls_ciphers = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 Connection profiles [default]:
Tue Oct 16 20:49:41 2012 us=843000 proto = tcp-client
Tue Oct 16 20:49:41 2012 us=843000 local = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 local_port = 0
Tue Oct 16 20:49:41 2012 us=843000 remote = 'adress'
Tue Oct 16 20:49:41 2012 us=843000 remote_port = port
Tue Oct 16 20:49:41 2012 us=843000 remote_float = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 bind_defined = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 bind_local = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 connect_retry_seconds = 5
Tue Oct 16 20:49:41 2012 us=843000 connect_timeout = 10
Tue Oct 16 20:49:41 2012 us=843000 connect_retry_max = 0
Tue Oct 16 20:49:41 2012 us=843000 socks_proxy_server = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 socks_proxy_port = 0
Tue Oct 16 20:49:41 2012 us=843000 socks_proxy_retry = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 Connection profiles END
Tue Oct 16 20:49:41 2012 us=843000 remote_random = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 ipchange = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 dev = 'tap'
Tue Oct 16 20:49:41 2012 us=843000 dev_type = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 dev_node = 'LAN-Verbindung 2'
Tue Oct 16 20:49:41 2012 us=843000 lladdr = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 topology = 1
Tue Oct 16 20:49:41 2012 us=843000 tun_ipv6 = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 ifconfig_local = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 ifconfig_remote_netmask = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 ifconfig_noexec = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 ifconfig_nowarn = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 shaper = 0
Tue Oct 16 20:49:41 2012 us=843000 tun_mtu = 1500
Tue Oct 16 20:49:41 2012 us=843000 tun_mtu_defined = ENABLED
Tue Oct 16 20:49:41 2012 us=843000 link_mtu = 1500
Tue Oct 16 20:49:41 2012 us=843000 link_mtu_defined = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 tun_mtu_extra = 32
Tue Oct 16 20:49:41 2012 us=843000 tun_mtu_extra_defined = ENABLED
Tue Oct 16 20:49:41 2012 us=843000 fragment = 0
Tue Oct 16 20:49:41 2012 us=843000 mtu_discover_type = -1
Tue Oct 16 20:49:41 2012 us=843000 mtu_test = 0
Tue Oct 16 20:49:41 2012 us=843000 mlock = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 keepalive_ping = 10
Tue Oct 16 20:49:41 2012 us=843000 keepalive_timeout = 60
Tue Oct 16 20:49:41 2012 us=843000 inactivity_timeout = 0
Tue Oct 16 20:49:41 2012 us=843000 ping_send_timeout = 10
Tue Oct 16 20:49:41 2012 us=843000 ping_rec_timeout = 60
Tue Oct 16 20:49:41 2012 us=843000 ping_rec_timeout_action = 2
Tue Oct 16 20:49:41 2012 us=843000 ping_timer_remote = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 remap_sigusr1 = 0
Tue Oct 16 20:49:41 2012 us=843000 explicit_exit_notification = 0
Tue Oct 16 20:49:41 2012 us=843000 persist_tun = ENABLED
Tue Oct 16 20:49:41 2012 us=843000 persist_local_ip = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 persist_remote_ip = DISABLED
Tue Oct 16 20:49:41 2012 us=843000 persist_key = ENABLED
Tue Oct 16 20:49:41 2012 us=843000 mssfix = 1450
Tue Oct 16 20:49:41 2012 us=843000 resolve_retry_seconds = 1000000000
Tue Oct 16 20:49:41 2012 us=843000 username = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 groupname = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 chroot_dir = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 cd_dir = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=843000 writepid = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=953000 up_script = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=953000 down_script = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=953000 down_pre = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 up_restart = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 up_delay = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 daemon = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 inetd = 0
Tue Oct 16 20:49:41 2012 us=953000 log = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 suppress_timestamps = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 nice = 0
Tue Oct 16 20:49:41 2012 us=953000 verbosity = 5
Tue Oct 16 20:49:41 2012 us=953000 mute = 0
Tue Oct 16 20:49:41 2012 us=953000 gremlin = 0
Tue Oct 16 20:49:41 2012 us=953000 status_file = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=953000 status_file_version = 1
Tue Oct 16 20:49:41 2012 us=953000 status_file_update_freq = 60
Tue Oct 16 20:49:41 2012 us=953000 occ = ENABLED
Tue Oct 16 20:49:41 2012 us=953000 rcvbuf = 0
Tue Oct 16 20:49:41 2012 us=953000 sndbuf = 0
Tue Oct 16 20:49:41 2012 us=953000 sockflags = 0
Tue Oct 16 20:49:41 2012 us=953000 fast_io = DISABLED
Tue Oct 16 20:49:41 2012 us=953000 lzo = 7
Tue Oct 16 20:49:41 2012 us=953000 route_script = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=953000 route_default_gateway = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=953000 route_default_metric = 0
Tue Oct 16 20:49:41 2012 us=953000 route_noexec = DISABLED
Tue Oct 16 20:49:41 2012 us=968000 route_delay = 2
Tue Oct 16 20:49:41 2012 us=968000 route_delay_window = 30
Tue Oct 16 20:49:41 2012 us=968000 route_delay_defined = ENABLED
Tue Oct 16 20:49:41 2012 us=968000 route_nopull = DISABLED
Tue Oct 16 20:49:41 2012 us=968000 route_gateway_via_dhcp = DISABLED
Tue Oct 16 20:49:41 2012 us=968000 max_routes = 100
Tue Oct 16 20:49:41 2012 us=968000 allow_pull_fqdn = DISABLED
Tue Oct 16 20:49:41 2012 us=968000 management_addr = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=968000 management_port = 0
Tue Oct 16 20:49:41 2012 us=968000 management_user_pass = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=968000 management_log_history_cache = 250
Tue Oct 16 20:49:41 2012 us=968000 management_echo_buffer_size = 100
Tue Oct 16 20:49:41 2012 us=968000 management_write_peer_info_file = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=968000 management_client_user = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=984000 management_client_group = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=984000 management_flags = 0
Tue Oct 16 20:49:41 2012 us=984000 shared_secret_file = '[UNDEF]'
Tue Oct 16 20:49:41 2012 us=984000 key_direction = 2
Tue Oct 16 20:49:41 2012 us=984000 ciphername_defined = ENABLED
Tue Oct 16 20:49:41 2012 us=984000 ciphername = 'AES-256-CBC'
Tue Oct 16 20:49:41 2012 us=984000 authname_defined = ENABLED
Tue Oct 16 20:49:41 2012 us=984000 authname = 'SHA1'
Tue Oct 16 20:49:41 2012 us=984000 prng_hash = 'SHA1'
Tue Oct 16 20:49:41 2012 us=984000 prng_nonce_secret_len = 16
Tue Oct 16 20:49:41 2012 us=984000 keysize = 0
Tue Oct 16 20:49:41 2012 us=984000 engine = DISABLED
Tue Oct 16 20:49:41 2012 us=984000 replay = ENABLED
Tue Oct 16 20:49:41 2012 us=984000 mute_replay_warnings = DISABLED
Tue Oct 16 20:49:41 2012 us=984000 replay_window = 64
Tue Oct 16 20:49:41 2012 us=984000 replay_time = 15
Tue Oct 16 20:49:42 2012 us=15000 packet_id_file = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 use_iv = ENABLED
Tue Oct 16 20:49:42 2012 us=15000 test_crypto = DISABLED
Tue Oct 16 20:49:42 2012 us=15000 tls_server = DISABLED
Tue Oct 16 20:49:42 2012 us=15000 tls_client = ENABLED
Tue Oct 16 20:49:42 2012 us=15000 key_method = 2
Tue Oct 16 20:49:42 2012 us=15000 ca_file = 'ca.crt'
Tue Oct 16 20:49:42 2012 us=15000 ca_path = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 dh_file = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 cert_file = 'client01.crt'
Tue Oct 16 20:49:42 2012 us=15000 priv_key_file = 'client01.key'
Tue Oct 16 20:49:42 2012 us=15000 pkcs12_file = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 cryptoapi_cert = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 cipher_list = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 tls_verify = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 tls_export_cert = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=15000 tls_remote = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=31000 crl_file = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=31000 ns_cert_type = 64
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku[i] = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku[i] = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku[i] = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku[i] = 0
Tue Oct 16 20:49:42 2012 us=31000 remote_cert_ku[i] = 0
Tue Oct 16 20:49:42 2012 us=46000 remote_cert_ku[i] = 0
Tue Oct 16 20:49:42 2012 us=46000 remote_cert_eku = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=46000 tls_timeout = 2
Tue Oct 16 20:49:42 2012 us=46000 renegotiate_bytes = 0
Tue Oct 16 20:49:42 2012 us=46000 renegotiate_packets = 0
Tue Oct 16 20:49:42 2012 us=46000 renegotiate_seconds = 3600
Tue Oct 16 20:49:42 2012 us=46000 handshake_window = 60
Tue Oct 16 20:49:42 2012 us=46000 transition_window = 3600
Tue Oct 16 20:49:42 2012 us=46000 single_session = DISABLED
Tue Oct 16 20:49:42 2012 us=46000 push_peer_info = DISABLED
Tue Oct 16 20:49:42 2012 us=46000 tls_exit = DISABLED
Tue Oct 16 20:49:42 2012 us=46000 tls_auth_file = 'static.key'
Tue Oct 16 20:49:42 2012 us=46000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=46000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=46000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=62000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_protected_authentication = DISABLED
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=78000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_private_mode = 00000000
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=93000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=109000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=109000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=109000 pkcs11_cert_private = DISABLED
Tue Oct 16 20:49:42 2012 us=109000 pkcs11_pin_cache_period = -1
Tue Oct 16 20:49:42 2012 us=109000 pkcs11_id = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=109000 pkcs11_id_management = DISABLED
Tue Oct 16 20:49:42 2012 us=109000 server_network = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 server_netmask = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 server_bridge_ip = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 server_bridge_netmask = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 server_bridge_pool_start = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 server_bridge_pool_end = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 ifconfig_pool_defined = DISABLED
Tue Oct 16 20:49:42 2012 us=109000 ifconfig_pool_start = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=109000 ifconfig_pool_end = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=125000 ifconfig_pool_netmask = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=125000 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=125000 ifconfig_pool_persist_refresh_freq = 600
Tue Oct 16 20:49:42 2012 us=125000 n_bcast_buf = 256
Tue Oct 16 20:49:42 2012 us=125000 tcp_queue_limit = 64
Tue Oct 16 20:49:42 2012 us=125000 real_hash_size = 256
Tue Oct 16 20:49:42 2012 us=125000 virtual_hash_size = 256
Tue Oct 16 20:49:42 2012 us=125000 client_connect_script = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=125000 learn_address_script = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=125000 client_disconnect_script = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=125000 client_config_dir = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=125000 ccd_exclusive = DISABLED
Tue Oct 16 20:49:42 2012 us=125000 tmp_dir = 'E:\temp\'
Tue Oct 16 20:49:42 2012 us=125000 push_ifconfig_defined = DISABLED
Tue Oct 16 20:49:42 2012 us=140000 push_ifconfig_local = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=140000 push_ifconfig_remote_netmask = 0.0.0.0
Tue Oct 16 20:49:42 2012 us=140000 enable_c2c = DISABLED
Tue Oct 16 20:49:42 2012 us=140000 duplicate_cn = DISABLED
Tue Oct 16 20:49:42 2012 us=140000 cf_max = 0
Tue Oct 16 20:49:42 2012 us=140000 cf_per = 0
Tue Oct 16 20:49:42 2012 us=140000 max_clients = 1024
Tue Oct 16 20:49:42 2012 us=140000 max_routes_per_client = 256
Tue Oct 16 20:49:42 2012 us=140000 auth_user_pass_verify_script = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=140000 auth_user_pass_verify_script_via_file = DISABLED
Tue Oct 16 20:49:42 2012 us=140000 ssl_flags = 0
Tue Oct 16 20:49:42 2012 us=140000 client = DISABLED
Tue Oct 16 20:49:42 2012 us=140000 pull = ENABLED
Tue Oct 16 20:49:42 2012 us=140000 auth_user_pass_file = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=140000 show_net_up = DISABLED
Tue Oct 16 20:49:42 2012 us=140000 route_method = 2
Tue Oct 16 20:49:42 2012 us=156000 ip_win32_defined = DISABLED
Tue Oct 16 20:49:42 2012 us=156000 ip_win32_type = 3
Tue Oct 16 20:49:42 2012 us=156000 dhcp_masq_offset = 0
Tue Oct 16 20:49:42 2012 us=156000 dhcp_lease_time = 31536000
Tue Oct 16 20:49:42 2012 us=156000 tap_sleep = 0
Tue Oct 16 20:49:42 2012 us=156000 dhcp_options = DISABLED
Tue Oct 16 20:49:42 2012 us=156000 dhcp_renew = DISABLED
Tue Oct 16 20:49:42 2012 us=156000 dhcp_pre_release = DISABLED
Tue Oct 16 20:49:42 2012 us=156000 dhcp_release = DISABLED
Tue Oct 16 20:49:42 2012 us=156000 domain = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=156000 netbios_scope = '[UNDEF]'
Tue Oct 16 20:49:42 2012 us=156000 netbios_node_type = 0
Tue Oct 16 20:49:42 2012 us=156000 disable_nbt = DISABLED
Tue Oct 16 20:49:42 2012 us=156000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Oct 16 20:49:42 2012 us=156000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Oct 16 20:49:42 2012 us=343000 Control Channel Authentication: using 'static.key' as a OpenVPN static key file
Tue Oct 16 20:49:42 2012 us=343000 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 16 20:49:42 2012 us=343000 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 16 20:49:42 2012 us=343000 LZO compression initialized
Tue Oct 16 20:49:42 2012 us=343000 Control Channel MTU parms [ L:1592 D:168 EF:68 EB:0 ET:0 EL:0 ]
Tue Oct 16 20:49:42 2012 us=343000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Oct 16 20:49:42 2012 us=500000 Data Channel MTU parms [ L:1592 D:1450 EF:60 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Oct 16 20:49:42 2012 us=500000 Local Options String: 'V4,dev-type tap,link-mtu 1592,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Oct 16 20:49:42 2012 us=500000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1592,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Oct 16 20:49:42 2012 us=500000 Local Options hash (VER=V4): '88107939'
Tue Oct 16 20:49:42 2012 us=500000 Expected Remote Options hash (VER=V4): 'ad144f1c'
Tue Oct 16 20:49:42 2012 us=500000 Attempting to establish TCP connection with [i]adress:port
Tue Oct 16 20:49:42 2012 us=562000 TCP connection established with adress:port
Tue Oct 16 20:49:42 2012 us=562000 TCPv4_CLIENT link local: [undef]
Tue Oct 16 20:49:42 2012 us=562000 TCPv4_CLIENT link remote: adress:port
Tue Oct 16 20:49:42 2012 us=640000 TLS: Initial packet from adress:port, sid=b5b9aab0 298a355a
Tue Oct 16 20:49:44 2012 VERIFY OK: depth=1, /C=some stuff
Tue Oct 16 20:49:44 2012 VERIFY OK: nsCertType=SERVER
Tue Oct 16 20:49:44 2012 VERIFY OK: depth=0, /C=some stuff too
Tue Oct 16 20:49:46 2012 us=375000 NOTE: Options consistency check may be skewed by version differences
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tap'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1592'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1532'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'proto' is present in local config but missing in remote config, local='proto TCPv4_SERVER'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'keydir' is present in local config but missing in remote config, local='keydir 0'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-256-CBC'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA1'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 256'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'tls-auth' is present in local config but missing in remote config, local='tls-auth'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Tue Oct 16 20:49:46 2012 us=375000 WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
Tue Oct 16 20:49:46 2012 us=375000 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 16 20:49:46 2012 us=375000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 16 20:49:46 2012 us=375000 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 16 20:49:46 2012 us=375000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 16 20:49:46 2012 us=375000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Oct 16 20:49:46 2012 us=375000 [fritzbox] Peer Connection Initiated with adress:port
Tue Oct 16 20:49:48 2012 us=750000 SENT CONTROL [fritzbox]: 'PUSH_REQUEST' (status=1)
Tue Oct 16 20:49:49 2012 us=78000 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.178.1,redirect-gateway,route 192.168.178.0 255.255.255.0,topology subnet,route 192.168.178.0 255.255.255.0 192.168.178.1,route-gateway 192.168.178.1,route 192.168.178.0 255.255.255.0,ping 10,ping-restart 120,ifconfig 192.168.178.101 255.255.255.0'
Tue Oct 16 20:49:49 2012 us=78000 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 16 20:49:49 2012 us=78000 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 16 20:49:49 2012 us=78000 OPTIONS IMPORT: route options modified
Tue Oct 16 20:49:49 2012 us=78000 OPTIONS IMPORT: route-related options modified
Tue Oct 16 20:49:49 2012 us=78000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 16 20:49:49 2012 us=78000 ROUTE default_gateway=local gateway
Tue Oct 16 20:49:49 2012 us=93000 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{03C9A09E-9D3C-494E-863E-9D111AD3F63A}.tap
Tue Oct 16 20:49:49 2012 us=93000 TAP-Win32 Driver Version 9.9
Tue Oct 16 20:49:49 2012 us=93000 TAP-Win32 MTU=1500
Tue Oct 16 20:49:49 2012 us=93000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.178.101/255.255.255.0 on interface {03C9A09E-9D3C-494E-863E-9D111AD3F63A} [DHCP-serv: 192.168.178.0, lease-time: 31536000]
Tue Oct 16 20:49:49 2012 us=93000 DHCP option string: 0604c0a8 b201
Tue Oct 16 20:49:49 2012 us=93000 Successful ARP Flush on interface [18] {03C9A09E-9D3C-494E-863E-9D111AD3F63A}
Tue Oct 16 20:49:51 2012 us=140000 TEST ROUTES: 4/4 succeeded len=3 ret=1 a=0 u/d=up
Tue Oct 16 20:49:51 2012 us=140000 C:\WINDOWS\system32\route.exe ADD server ip MASK 255.255.255.255 local gateway ip
OK!
Tue Oct 16 20:49:51 2012 us=187000 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 local gateway ip
OK!
Tue Oct 16 20:49:51 2012 us=203000 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 192.168.178.1
OK!
Tue Oct 16 20:49:51 2012 us=218000 WARNING: potential route subnet conflict between local LAN [192.168.178.0/255.255.255.0] and remote VPN [192.168.178.0/255.255.255.0]
Tue Oct 16 20:49:51 2012 us=218000 C:\WINDOWS\system32\route.exe ADD 192.168.178.0 MASK 255.255.255.0 192.168.178.1
OK!
Tue Oct 16 20:49:51 2012 us=234000 WARNING: potential route subnet conflict between local LAN [192.168.178.0/255.255.255.0] and remote VPN [192.168.178.0/255.255.255.0]
Tue Oct 16 20:49:51 2012 us=234000 C:\WINDOWS\system32\route.exe ADD 192.168.178.0 MASK 255.255.255.0 192.168.178.1
Hinzuf??gen der Route fehlgeschlagen: Das Objekt ist bereits vorhanden.
Tue Oct 16 20:49:51 2012 us=250000 WARNING: potential route subnet conflict between local LAN [192.168.178.0/255.255.255.0] and remote VPN [192.168.178.0/255.255.255.0]
Tue Oct 16 20:49:51 2012 us=250000 C:\WINDOWS\system32\route.exe ADD 192.168.178.0 MASK 255.255.255.0 192.168.178.1
Hinzuf??gen der Route fehlgeschlagen: Das Objekt ist bereits vorhanden.
Tue Oct 16 20:49:51 2012 us=265000 Initialization Sequence Completed
Perseus
I tried your suggestion, but then can only connect to server, not to the web anymore, didn't figured out why.
Another interesting fact is, my original config from above connected through the same foreign network does not get lost if used via windows xp. So it seems to be an win7 only issue.
