Hi there,
I installed client configuration on DD-WRT router.
The client connect successfully to server but I have strange thing happens frequently:
"multi_create_instance called" and the verification occurs again frequently rather than normal. Would you please help to understand what is happening and how to avoid MULTI issue
client.conf
echo "client
dev tun
proto tcp
remote a.b.c.d 443 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
;tun-mtu 1500
;tun-mtu-extra 32
;mssfix 1450
persist-key
persist-tun
route a.b.c.d 255.255.255.255 net_gateway
ca /tmp/openvpncl/ca.crt
cert /tmp/openvpncl/client1.crt
key /tmp/openvpncl/client1.key
;remote-cert-tls server
ns-cert-type server
;auth-user-pass
;auth-nocache
cipher BF-CBC
auth SHA1
comp-lzo
keepalive 10 120
reneg-sec 0
explicit-exit-notify 3
verb 3
server.conf
local a.b.c.d #- your_server_ip goes here
port 443 #- port
proto tcp #- protocol
dev tun
;tun-mtu 1500
;tun-mtu-extra 32
;mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
;plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
;client-cert-not-required
;username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "explicit-exit-notify 3"
;duplicate-cn
cipher BF-CBC
auth SHA1
comp-lzo
persist-key
persist-tun
status 1194.log
keepalive 10 120
reneg-sec 36000
verb 3
Server log
openvpn[2420]: MULTI: multi_create_instance called
openvpn[2420]: Re-using SSL/TLS context
openvpn[2420]: LZO compression initialized
openvpn[2420]: Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
openvpn[2420]: Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
openvpn[2420]: Local Options hash (VER=V4): 'c0103fa8'
openvpn[2420]: Expected Remote Options hash (VER=V4): '69109d17'
openvpn[2420]: TCP connection established with 92.62.167.193:x
openvpn[2420]: TCPv4_SERVER link local: [undef]
openvpn[2420]: TCPv4_SERVER link remote: 92.62.167.193:x
openvpn[2420]: 92.62.167.193:x TLS: Initial packet from 92.62.167.193:x, sid=b19fb901 427b8dc2
openvpn[2420]: 92.62.167.193:x VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=OpenVPN-CA/name=changeme/emailAddress=mail@host.domain
openvpn[2420]: 92.62.167.193:x VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=client1/name=changeme/emailAddress=mail@host.domain
openvpn[2420]: 92.62.167.193:x Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
openvpn[2420]: 92.62.167.193:x Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
openvpn[2420]: 92.62.167.193:x Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
openvpn[2420]: 92.62.167.193:x Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
openvpn[2420]: 92.62.167.193:x Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
openvpn[2420]: 92.62.167.193:x [client1] Peer Connection Initiated with 92.62.167.193:x
openvpn[2420]: client1/92.62.167.193:x MULTI: Learn: 10.8.0.6 -> client1/92.62.167.193:x
openvpn[2420]: client1/92.62.167.193:x MULTI: primary virtual IP for client1/92.62.167.193:x: 10.8.0.6
openvpn[2420]: client1/92.62.167.193:x PUSH: Received control message: 'PUSH_REQUEST'
openvpn[2420]: client1/92.62.167.193:x SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,explicit-exit-notify 3,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
