Hi
Posting config:
client
dev tun
proto udp
remote 178.132.75.50 1194
remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
reneg-sec
verb 3
//
Regarding disabling ipv6, it was actually disabled by default. By enabling it the error message didnt appear anymore. However, my clients wont connect to internet when openvpn client is connected so something is wrong anyways. With ipv6 enabled on router i get the log below:
Mar 31 11:34:25 DarkKnight user.info kernel: tun: (C) 1999-2004 Max Krasnyansky <
maxk@qualcomm.com>
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17506]: OpenVPN 2.3.0 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 4 2013
Mar 31 11:34:25 DarkKnight daemon.warn openvpn[17506]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17506]: Socket Buffers: R=[112640->131072] S=[112640->131072]
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: UDPv4 link local: [undef]
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: UDPv4 link remote: [AF_INET]178.132.75.50:1194
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: TLS: Initial packet from [AF_INET]178.132.75.50:1194, sid=36c73343 4ecb7af3
Mar 31 11:34:25 DarkKnight daemon.warn openvpn[17512]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: VERIFY OK: depth=1, C=RU, ST=Moscow, L=Moscow, O=Azire Networks, OU=VPN, CN=Azire Networks, name=Azire Networks, emailAddress=
noc@azire.net
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: Validating certificate key usage
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: ++ Certificate has key usage 00a0, expects 00a0
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: VERIFY KU OK
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: Validating certificate extended key usage
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: VERIFY EKU OK
Mar 31 11:34:25 DarkKnight daemon.notice openvpn[17512]: VERIFY OK: depth=0, C=RU, ST=Moscow, L=Moscow, O=Azire Networks, OU=VPN, CN=ovpn1, name=ovpn1.azirevpn.net, emailAddress=
noc@azire.net
Mar 31 11:34:26 DarkKnight daemon.notice openvpn[17512]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 31 11:34:26 DarkKnight daemon.notice openvpn[17512]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 31 11:34:26 DarkKnight daemon.notice openvpn[17512]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 31 11:34:26 DarkKnight daemon.notice openvpn[17512]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 31 11:34:26 DarkKnight daemon.notice openvpn[17512]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mar 31 11:34:26 DarkKnight daemon.notice openvpn[17512]: [ovpn1] Peer Connection Initiated with [AF_INET]178.132.75.50:1194
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: SENT CONTROL [ovpn1]: 'PUSH_REQUEST' (status=1)
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: PUSH: Received control message: 'PUSH_REPLY,ifconfig-ipv6 2a03:8600:1001:2037::1010/64 2a03:8600:1001:2037::1,route-ipv6 2000::/3 2A03:8600:1001:2037::1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 178.132.75.60,tun-ipv6,route-gateway 178.132.78.193,topology subnet,ping 3,ping-restart 15,ifconfig 178.132.78.210 255.255.255.224'
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: OPTIONS IMPORT: timers and/or timeouts modified
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: OPTIONS IMPORT: --ifconfig/up options modified
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: OPTIONS IMPORT: route options modified
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: OPTIONS IMPORT: route-related options modified
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: TUN/TAP device tun0 opened
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: TUN/TAP TX queue length set to 100
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=1
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: /sbin/ifconfig tun0 178.132.78.210 netmask 255.255.255.224 mtu 1500 broadcast 178.132.78.223
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: /sbin/ifconfig tun0 add 2a03:8600:1001:2037::1010/64
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: updown.sh tun0 1500 1542 178.132.78.210 255.255.255.224 init
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[16821]: exiting on receipt of SIGTERM
Mar 31 11:34:29 DarkKnight user.debug init[1]: 188: /tmp/ppp/resolv.conf can't be opened
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: started, version UNKNOWN cachesize 1500
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: compile time options: IPv6 GNU-getopt no-RTC no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack Tomato-helper auth
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: asynchronous logging enabled, queue limit is 5 messages
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq-dhcp[17548]: DHCP, IP range 192.168.1.20 -- 192.168.1.100, lease time 1d
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: reading /etc/resolv.dnsmasq
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: using nameserver 195.67.199.19#53
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: using nameserver 195.67.199.18#53
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: using nameserver 178.132.75.60#53
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: read /etc/hosts - 3 addresses
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq[17548]: read /etc/dnsmasq/hosts/hosts - 3 addresses
Mar 31 11:34:29 DarkKnight daemon.info dnsmasq-dhcp[17548]: read /etc/dnsmasq/dhcp/dhcp-hosts
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: /sbin/route add -net 178.132.75.50 netmask 255.255.255.255 gw 78.78.247.129
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 178.132.78.193
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 178.132.78.193
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: add_route_ipv6(2000::/3 -> 2a03:8600:1001:2037::1 metric -1) dev tun0
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: /sbin/route -A inet6 add 2000::/3 dev tun0
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: Initialization Sequence Completed
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: OpenVPN STATISTICS
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: Updated,Sun Mar 31 11:34:29 2013
Mar 31 11:34:29 DarkKnight daemon.notice openvpn[17512]: TUN/TAP read bytes,0
